sample
88cb864c793214979a2f29df32c73d239f6c1526eecda96b9efc31a31f02b4ba
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
88cb864c793214979a2f29df32c73d239f6c1526eecda96b9efc31a31f02b4ba
TLP:CLEAR
Sample
sha-25688cb864c793214979a2f29df32c73d239f6c1526eecda96b9efc31a31f02b4ba
familyCobalt Strike
identified byfile analysis
first seen2026-09-10 18:58 UTC
last seen2026-09-10 18:58 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 101.126.10.34:443 Cobalt Strike