sample
a09458238f00e2c737921fe3f24c44303a2c4ee8711ab20db02e9463d40b68a5
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
a09458238f00e2c737921fe3f24c44303a2c4ee8711ab20db02e9463d40b68a5
TLP:CLEAR
Sample
sha-256a09458238f00e2c737921fe3f24c44303a2c4ee8711ab20db02e9463d40b68a5
familyCobalt Strike
identified byfile analysis
first seen2026-09-10 01:12 UTC
last seen2026-10-06 08:06 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 152.136.253.101:8888 Cobalt Strike