sample
678f61fe9ffec0e504db1ad44014063394080f816dcfabe78104a84113d15246
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
678f61fe9ffec0e504db1ad44014063394080f816dcfabe78104a84113d15246
TLP:CLEAR
Sample
sha-256678f61fe9ffec0e504db1ad44014063394080f816dcfabe78104a84113d15246
familyCobalt Strike
identified byfile analysis
first seen2026-10-13 03:21 UTC
last seen2026-10-13 03:21 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 203.91.75.89:5005 Cobalt Strike