sample
7b7e2156c16388c59c7e6acaa13761916002738fb5a529e5b0af245d6001ce2f
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
7b7e2156c16388c59c7e6acaa13761916002738fb5a529e5b0af245d6001ce2f
TLP:CLEAR
Sample
sha-2567b7e2156c16388c59c7e6acaa13761916002738fb5a529e5b0af245d6001ce2f
familyCobalt Strike
identified byfile analysis
first seen2026-09-20 07:11 UTC
last seen2026-10-01 21:06 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 154.219.101.56:8080 Cobalt Strike