sample
54d6432c3b26d515d862042df7abe8426cc28049b1fcba703e6443a8599f81ef
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
54d6432c3b26d515d862042df7abe8426cc28049b1fcba703e6443a8599f81ef
TLP:CLEAR
Sample
sha-25654d6432c3b26d515d862042df7abe8426cc28049b1fcba703e6443a8599f81ef
familyCobalt Strike
identified byfile analysis
first seen2026-09-25 06:25 UTC
last seen2026-09-25 06:25 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 23.27.143.19:80 Cobalt Strike