sample
541445bd63a5ed1444834393634ea72ab053f6e12e8cc1f3aaef5b6dc08e47c9
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
541445bd63a5ed1444834393634ea72ab053f6e12e8cc1f3aaef5b6dc08e47c9
TLP:CLEAR
Sample
sha-256541445bd63a5ed1444834393634ea72ab053f6e12e8cc1f3aaef5b6dc08e47c9
familyCobalt Strike
identified byfile analysis
first seen2026-10-14 09:05 UTC
last seen2026-10-16 03:03 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 118.89.88.183:56781 Cobalt Strike