sample
7e76bc9f827be89ec01a26e1259c52dfd4f983e14477a882da614e180e770e54
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
7e76bc9f827be89ec01a26e1259c52dfd4f983e14477a882da614e180e770e54
TLP:CLEAR
Sample
sha-2567e76bc9f827be89ec01a26e1259c52dfd4f983e14477a882da614e180e770e54
familyCobalt Strike
identified byfile analysis
first seen2026-09-21 09:15 UTC
last seen2026-09-22 09:18 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 118.89.88.183:56781 Cobalt Strike