sample
79bb35c9770f103cfab28c7a4933c7d140d03a82a18eb3eeff698f0cb65e0788
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
79bb35c9770f103cfab28c7a4933c7d140d03a82a18eb3eeff698f0cb65e0788
TLP:CLEAR
Sample
sha-25679bb35c9770f103cfab28c7a4933c7d140d03a82a18eb3eeff698f0cb65e0788
familyCobalt Strike
identified byfile analysis
first seen2026-10-01 06:49 UTC
last seen2026-10-02 21:06 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 85.175.101.203:80 Cobalt Strike