sample
6f35cf356eaebc7a0103cfd1d9a18c9bcad5776672983f916a8f89ac29cca0b5
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
6f35cf356eaebc7a0103cfd1d9a18c9bcad5776672983f916a8f89ac29cca0b5
TLP:CLEAR
Sample
sha-2566f35cf356eaebc7a0103cfd1d9a18c9bcad5776672983f916a8f89ac29cca0b5
familyCobalt Strike
identified byfile analysis
first seen2026-09-11 21:41 UTC
last seen2026-09-12 09:02 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 203.91.75.89:5006 Cobalt Strike