sample
dc5c6c0e9ec8671c20184e15b2fbe6c8e89943697a34205f7d52b849b70a7a43
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
dc5c6c0e9ec8671c20184e15b2fbe6c8e89943697a34205f7d52b849b70a7a43
TLP:CLEAR
Sample
sha-256dc5c6c0e9ec8671c20184e15b2fbe6c8e89943697a34205f7d52b849b70a7a43
familyCobalt Strike
identified byfile analysis
first seen2026-10-23 06:17 UTC
last seen2026-10-23 06:17 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 113.52.135.27:8099 Cobalt Strike