sample
9d9e2ec6304e0420bd8497d6cc27652f7e8aba55eb6bcb23a07261de448317b9
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
9d9e2ec6304e0420bd8497d6cc27652f7e8aba55eb6bcb23a07261de448317b9
TLP:CLEAR
Sample
sha-2569d9e2ec6304e0420bd8497d6cc27652f7e8aba55eb6bcb23a07261de448317b9
familyCobalt Strike
identified byfile analysis
first seen2026-09-27 09:11 UTC
last seen2026-09-27 09:11 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 156.254.20.46:5996 Cobalt Strike