sample
ddc79c3c986c4d7f01aafa79639c8c7125a9a76f2b5f9b4a6224dfe8138179c8
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
ddc79c3c986c4d7f01aafa79639c8c7125a9a76f2b5f9b4a6224dfe8138179c8
TLP:CLEAR
Sample
sha-256ddc79c3c986c4d7f01aafa79639c8c7125a9a76f2b5f9b4a6224dfe8138179c8
familyCobalt Strike
identified byfile analysis
first seen2026-10-10 06:21 UTC
last seen2026-10-10 06:21 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 36.255.97.162:4045 Cobalt Strike