Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
5 IOCs

Malware Analysis — Cobalt Strike

0xMrMagnezi
0xMrMagnezi
Published February 29, 2024Original Report

Malware Families

Excerpt

Malware Analysis — Cobalt Strike Cobalt Strike is a versatile tool for Red Team operations and penetration testing. However, threat actors also use it for malicious activities like establishing covert communication, conducting post-exploitation tasks, moving laterally across networks, crafting and delivering weaponized payloads, and executing social engineering attacks. Figure 1: Malware Bazaar sample After downloading and extracting the zip file, two sections were observed…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREpickilish.comCAPABILITYCobalt StrikeVICTIMunknown
Adversary
Infrastructure(1)
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

5 indicators

TypeIndicatorConfidenceScoreFirst Seen
MD530d2256f99c9dc5e6846838f655fae34MediumScore 53/100First seen
MD54d1a54992dc1883a86069182e55bccf4MediumScore 53/100First seen
Domainpickilish.comHighScore 58/100First seen
MD5c58f43348436a19ca37a676b477a137fMediumScore 53/100First seen
MD58d8fe14374cb94fe10070d9591fea3bbMediumScore 53/100First seen

IOC Relationship Graph

Building graph…