sample
6babfc145c87651c4a8ae28892d79307f54e672020a9f9dbb931bc99b7660b6f
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
6babfc145c87651c4a8ae28892d79307f54e672020a9f9dbb931bc99b7660b6f
TLP:CLEAR
Sample
sha-2566babfc145c87651c4a8ae28892d79307f54e672020a9f9dbb931bc99b7660b6f
familyCobalt Strike
identified byfile analysis
first seen2026-10-17 06:19 UTC
last seen2026-10-30 15:09 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 124.223.188.23:1288 Cobalt Strike