sample
4474af3765f3f8469ef9091c4c7a5ef46d5eb9c044aaaf813d3d2b70dd558c65
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
4474af3765f3f8469ef9091c4c7a5ef46d5eb9c044aaaf813d3d2b70dd558c65
TLP:CLEAR
Sample
sha-2564474af3765f3f8469ef9091c4c7a5ef46d5eb9c044aaaf813d3d2b70dd558c65
familyCobalt Strike
identified byfile analysis
first seen2026-10-10 09:12 UTC
last seen2026-10-10 09:12 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 203.91.75.89:5006 Cobalt Strike