sample
aa2d14f628a44941f1ec5ace61de8da5c95c3c1f7dcddf1f1d6abee1246eab1e
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
aa2d14f628a44941f1ec5ace61de8da5c95c3c1f7dcddf1f1d6abee1246eab1e
TLP:CLEAR
Sample
sha-256aa2d14f628a44941f1ec5ace61de8da5c95c3c1f7dcddf1f1d6abee1246eab1e
familyCobalt Strike
identified byfile analysis
first seen2026-10-01 09:09 UTC
last seen2026-10-01 09:09 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 175.124.145.102:80 Cobalt Strike