Malicious Python Script with a "Best Before" Date | Cobalt Strike Beacon

June 6, 2024, 12:36 p.m.

Description

This post details analysis of a malicious Python script, which yielded a hash for a Cobalt Strike beacon.

Date

  • Created: June 6, 2024, 12:35 p.m.
  • Published: June 6, 2024, 12:35 p.m.
  • Modified: June 6, 2024, 12:36 p.m.

Indicators

  • eca1cd9ce317ada991e0a037e70c15e471e9076faa58adf682efbfe22ffa747f

Attack Patterns

  • ALF:Cobalt_beacon_dll
  • TA0011