sample
a61b42f58c6764a6f7b06fde3d97bd6517cd4ccc01d525ee393e8bcf2c2bb30e
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
a61b42f58c6764a6f7b06fde3d97bd6517cd4ccc01d525ee393e8bcf2c2bb30e
TLP:CLEAR
Sample
sha-256a61b42f58c6764a6f7b06fde3d97bd6517cd4ccc01d525ee393e8bcf2c2bb30e
familyCobalt Strike
identified byfile analysis
first seen2026-09-28 03:10 UTC
last seen2026-10-01 09:10 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 114.66.27.110:8434 Cobalt Strike