sample
83b104404946f86a6aab5c40037621ec1df5d4228c560d04b659d9564ec186f0
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
83b104404946f86a6aab5c40037621ec1df5d4228c560d04b659d9564ec186f0
TLP:CLEAR
Sample
sha-25683b104404946f86a6aab5c40037621ec1df5d4228c560d04b659d9564ec186f0
familyCobalt Strike
identified byfile analysis
first seen2026-09-09 21:50 UTC
last seen2026-09-10 12:21 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 209.200.246.194:34586 Cobalt Strike