sample
42215a34eb64c3a8a493533a0c69cad3eb3e02b22df56dc0402bb425888038b0
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
42215a34eb64c3a8a493533a0c69cad3eb3e02b22df56dc0402bb425888038b0
TLP:CLEAR
Sample
sha-25642215a34eb64c3a8a493533a0c69cad3eb3e02b22df56dc0402bb425888038b0
familyCobalt Strike
identified byfile analysis
first seen2026-10-15 09:08 UTC
last seen2026-10-15 09:08 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 175.124.145.102:443 Cobalt Strike