sample
6702b76efbe255636a36a6988fb0fc0bb2f31e72e24f89626cc2c95af92d9230
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
6702b76efbe255636a36a6988fb0fc0bb2f31e72e24f89626cc2c95af92d9230
TLP:CLEAR
Sample
sha-2566702b76efbe255636a36a6988fb0fc0bb2f31e72e24f89626cc2c95af92d9230
familyCobalt Strike
identified byfile analysis
first seen2026-10-04 04:05 UTC
last seen2026-10-04 04:05 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 47.94.56.71:8443 Cobalt Strike