sample
a08898e5b0f4d2c9c4f983f3cc63c2a51ebb7b93d8cf28b9125d18f1ae1a6f21
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
a08898e5b0f4d2c9c4f983f3cc63c2a51ebb7b93d8cf28b9125d18f1ae1a6f21
TLP:CLEAR
Sample
sha-256a08898e5b0f4d2c9c4f983f3cc63c2a51ebb7b93d8cf28b9125d18f1ae1a6f21
familyCobalt Strike
identified byfile analysis
first seen2026-10-08 15:13 UTC
last seen2026-10-08 15:13 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 203.91.75.89:5006 Cobalt Strike