sample
4a603f4f3229e8c0d0a5e7f33e3e5f43c9d9883c29af404b111dfb2b97f8c16c
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
4a603f4f3229e8c0d0a5e7f33e3e5f43c9d9883c29af404b111dfb2b97f8c16c
TLP:CLEAR
Sample
sha-2564a603f4f3229e8c0d0a5e7f33e3e5f43c9d9883c29af404b111dfb2b97f8c16c
familyCobalt Strike
identified byfile analysis
first seen2026-09-22 06:08 UTC
last seen2026-09-26 06:57 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 62.164.177.14:22235 Cobalt Strike