sample
c1791b2a2ab5c3ea4d69b0f10999628d7cbbec74e6da1b2231dadc7a8c1ea0ab
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
c1791b2a2ab5c3ea4d69b0f10999628d7cbbec74e6da1b2231dadc7a8c1ea0ab
TLP:CLEAR
Sample
sha-256c1791b2a2ab5c3ea4d69b0f10999628d7cbbec74e6da1b2231dadc7a8c1ea0ab
familyCobalt Strike
identified byfile analysis
first seen2026-09-08 17:27 UTC
last seen2026-09-08 17:27 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 193.37.69.43:94 Cobalt Strike