sample
52662321889fa2458d721a1c35759421a07cabffa2b28a55b278e00e01a4694d
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
52662321889fa2458d721a1c35759421a07cabffa2b28a55b278e00e01a4694d
TLP:CLEAR
Sample
sha-25652662321889fa2458d721a1c35759421a07cabffa2b28a55b278e00e01a4694d
familyCobalt Strike
identified byfile analysis
first seen2026-09-27 07:03 UTC
last seen2026-10-13 21:14 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 209.38.82.85:8443 Cobalt Strike