sample
5d441cec06fbdbb4646601ffdaa1ba2de2415fbb35e3fb9fed18bad36d7a7560
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
5d441cec06fbdbb4646601ffdaa1ba2de2415fbb35e3fb9fed18bad36d7a7560
TLP:CLEAR
Sample
sha-2565d441cec06fbdbb4646601ffdaa1ba2de2415fbb35e3fb9fed18bad36d7a7560
familyCobalt Strike
identified byfile analysis
first seen2026-09-27 07:06 UTC
last seen2026-09-28 21:27 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 45.227.253.132:56225 Cobalt Strike