sample
508048a022fe22181338bfb68018d86d7acb8ce3bc25aa162bf6d0de9d2e6d7f
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
508048a022fe22181338bfb68018d86d7acb8ce3bc25aa162bf6d0de9d2e6d7f
TLP:CLEAR
Sample
sha-256508048a022fe22181338bfb68018d86d7acb8ce3bc25aa162bf6d0de9d2e6d7f
familyCobalt Strike
identified byfile analysis
first seen2026-10-17 06:18 UTC
last seen2026-10-30 15:09 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 46.19.140.50:443 Cobalt Strike