sample
7aec210219042bf5e1f841db6f106e972c0c6b30ac3565134c3a839023de8a5e
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
7aec210219042bf5e1f841db6f106e972c0c6b30ac3565134c3a839023de8a5e
TLP:CLEAR
Sample
sha-2567aec210219042bf5e1f841db6f106e972c0c6b30ac3565134c3a839023de8a5e
familyCobalt Strike
identified byfile analysis
first seen2026-10-21 15:09 UTC
last seen2026-10-21 15:09 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 124.222.210.55:32768 Cobalt Strike