sample
e63bc325d333ad090f46c48d1ea894a1b6e1c38b6f33e9226900947913b995af
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
e63bc325d333ad090f46c48d1ea894a1b6e1c38b6f33e9226900947913b995af
TLP:CLEAR
Sample
sha-256e63bc325d333ad090f46c48d1ea894a1b6e1c38b6f33e9226900947913b995af
familyCobalt Strike
identified byfile analysis
first seen2026-09-22 06:06 UTC
last seen2026-09-22 09:07 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 60.205.223.45:8081 Cobalt Strike