Hancitor July 2021 Campaign - Cobalt Strike stager 2 File Transfer

Strike ID:
C21-Mrva01
False Positive:
f
Variants:
1
Year:
2021

Description

This strike simulates the download of a malicious binary file via an HTTP GET request. This file is a malicious Cobalt Strike second stager binary which sends command control traffic after execution.