sample
b866fd916317b6e6d18676f8b464a7b1d1a518b6760f88a36f3376703232e9d9
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
b866fd916317b6e6d18676f8b464a7b1d1a518b6760f88a36f3376703232e9d9
TLP:CLEAR
Sample
sha-256b866fd916317b6e6d18676f8b464a7b1d1a518b6760f88a36f3376703232e9d9
familyCobalt Strike
identified byfile analysis
first seen2026-10-11 06:08 UTC
last seen2026-10-21 03:08 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 39.96.65.0:8082 Cobalt Strike