sample
4430255f8c3ecc5145a9c9936bb0b7e2cd062ff4aa07c996bb6b5ac2184a17a9
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
4430255f8c3ecc5145a9c9936bb0b7e2cd062ff4aa07c996bb6b5ac2184a17a9
TLP:CLEAR
Sample
sha-2564430255f8c3ecc5145a9c9936bb0b7e2cd062ff4aa07c996bb6b5ac2184a17a9
familyCobalt Strike
identified byfile analysis
first seen2026-10-23 09:16 UTC
last seen2026-10-23 09:16 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 45.221.118.46:8443 Cobalt Strike