sample
80ae28942c4c31372bc109f2a8aa1219ef64ec9614ccf5664478f96a2bd325bb
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
80ae28942c4c31372bc109f2a8aa1219ef64ec9614ccf5664478f96a2bd325bb
TLP:CLEAR
Sample
sha-25680ae28942c4c31372bc109f2a8aa1219ef64ec9614ccf5664478f96a2bd325bb
familyCobalt Strike
identified byfile analysis
first seen2026-10-03 08:29 UTC
last seen2026-10-06 03:11 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 47.105.36.109:443 Cobalt Strike