MALWARE-OTHER Win.Shellcode.CobaltStrike variant download attempt

IPS-SWG

1 SID: 64607

Stats

First seen: March 2025
Last seen: October 2026

Description

Detects payload download activity tied to the Win.Shellcode.CobaltStrike post-exploitation framework.

Related malware families

Cobalt Strike Shellcode

Related blogs

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

October 23, 202510 min read

New DOGE Big Balls Ransomware Tools in the Wild

New DOGE Big Balls Ransomware Tools in the Wild

May 7, 20259 min read

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

April 4, 20258 min read

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

March 11, 20254 min read

New Bumblebee Loader Infection Chain Signals Possible Resurgence

New Bumblebee Loader Infection Chain Signals Possible Resurgence

October 18, 20244 min read

DCRat Targets Users with HTML Smuggling

DCRat Targets Users with HTML Smuggling

September 26, 20245 min read

Netskope Threat Coverage: Microsoft Quick Assist Ransomware Attacks

Netskope Threat Coverage: Microsoft Quick Assist Ransomware Attacks

May 21, 20241 min read

From Delivery To Execution: An Evasive Azorult Campaign Smuggled Through Google Sites

From Delivery To Execution: An Evasive Azorult Campaign Smuggled Through Google Sites

March 15, 20249 min read

Netskope Threat Labs Stats for December 2023

January 22, 20245 min read

New DarkGate Variant Uses a New Loading Approach

New DarkGate Variant Uses a New Loading Approach

November 1, 20236 min read