sample
7050467da07c9504668fcaebddbb1c005c00b632b3be9734e33e097083432408
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
7050467da07c9504668fcaebddbb1c005c00b632b3be9734e33e097083432408
TLP:CLEAR
Sample
sha-2567050467da07c9504668fcaebddbb1c005c00b632b3be9734e33e097083432408
familyCobalt Strike
identified byfile analysis
first seen2026-10-25 15:08 UTC
last seen2026-10-30 15:11 UTC
Served by 2 addresses
A widely distributed file can reach unrelated hosts.
- 14.225.212.124:30005 Cobalt Strike
- 222.255.215.42:30005 Cobalt Strike