AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Catalog
REFERENCEPUBLIC INTELLIGENCE

Cobalt Strike - S0154

Name of ATT&CK software | [Cobalt Strike](https://attack.mitre.org/software/S0154) is a commercial, full-featured, remote access tool that bills itself as “adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors”. Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed

Reference details

Primary displayed family label
Cobalt Strike - S0154
Source context
2024/10/highlighting-ta866-asylum-ambuscade.json
First reported
2022-09-28 10:28 UTC
Last reported
2024-10-23 11:51 UTC
Catalog updated
2026-10-08 06:10 UTC

Source family labels

Cobalt Strike - S0154

Tags

misp:name="Malware"misp-galaxy:mitre-malware="Cobalt Strike - S0154"misp:galaxy-name="Malware"misp:galaxy-type="mitre-malware"

Published indicators

Network addresses are displayed in defanged form.

No file hashes or network indicators were published in this record.

Source observations

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Cobalt Strike - S0154
Source confidence
Not reported
Observed
2024-10-23 11:51 UTC
Retrieved
2026-10-08 06:10 UTC

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Cobalt Strike - S0154
Source confidence
Not reported
Observed
2024-07-30 15:56 UTC
Retrieved
2026-10-08 06:08 UTC

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Cobalt Strike - S0154
Source confidence
Not reported
Observed
2023-07-13 11:00 UTC
Retrieved
2026-10-08 05:42 UTC

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Cobalt Strike - S0154
Source confidence
Not reported
Observed
2022-12-20 11:25 UTC
Retrieved
2026-10-08 04:34 UTC

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Cobalt Strike - S0154
Source confidence
Not reported
Observed
2022-12-08 13:06 UTC
Retrieved
2026-10-08 04:33 UTC

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Cobalt Strike - S0154
Source confidence
Not reported
Observed
2022-09-28 10:28 UTC
Retrieved
2026-10-08 03:34 UTC

Research references