sample
526da1f22ff6b1a5839812538bfd5313f7cef3ce1798a8a235ddcb580f973046
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
526da1f22ff6b1a5839812538bfd5313f7cef3ce1798a8a235ddcb580f973046
TLP:CLEAR
Sample
sha-256526da1f22ff6b1a5839812538bfd5313f7cef3ce1798a8a235ddcb580f973046
familyCobalt Strike
identified byfile analysis
first seen2026-09-08 09:40 UTC
last seen2026-09-11 03:33 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 8.145.61.81:8090 Cobalt Strike