sample
5f751806aff547259667989b0c224aa3ab2ac659464304f68c6561a675c3ded8
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
5f751806aff547259667989b0c224aa3ab2ac659464304f68c6561a675c3ded8
TLP:CLEAR
Sample
sha-2565f751806aff547259667989b0c224aa3ab2ac659464304f68c6561a675c3ded8
familyCobalt Strike
identified byfile analysis
first seen2026-10-25 06:09 UTC
last seen2026-10-26 06:13 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 149.104.31.151:9999 Cobalt Strike