sample
a761e3d0c675aaf4a34cb7b6d3fae19bbb6ae95df85d09152edef2940c5f2a1f
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
a761e3d0c675aaf4a34cb7b6d3fae19bbb6ae95df85d09152edef2940c5f2a1f
TLP:CLEAR
Sample
sha-256a761e3d0c675aaf4a34cb7b6d3fae19bbb6ae95df85d09152edef2940c5f2a1f
familyCobalt Strike
identified byfile analysis
first seen2026-10-29 09:16 UTC
last seen2026-10-30 15:10 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 45.192.248.45:443 Cobalt Strike