sample
61306856b8a496b654dbd00b0b5ceec466100fa8450572a80dc0f4cea8ff5c84
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
61306856b8a496b654dbd00b0b5ceec466100fa8450572a80dc0f4cea8ff5c84
TLP:CLEAR
Sample
sha-25661306856b8a496b654dbd00b0b5ceec466100fa8450572a80dc0f4cea8ff5c84
familyCobalt Strike
identified byfile analysis
first seen2026-09-21 09:23 UTC
last seen2026-09-21 09:23 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 47.236.56.15:4445 Cobalt Strike