← Catalog REFERENCE PUBLIC INTELLIGENCE 2026-10-08 06:10 UTC
Cobalt Strike - S0154 Name of ATT&CK software | [Cobalt Strike](https://attack.mitre.org/software/S0154) is a commercial, full-featured, remote access tool that bills itself as “adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors”. Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed
Reference details Primary displayed family label Cobalt Strike - S0154 Source context 2024/10/highlighting-ta866-asylum-ambuscade.jsonFirst reported 2022-09-28 10:28 UTC Last reported 2024-10-23 11:51 UTC Catalog updated 2026-10-08 06:10 UTC Source family labels Cobalt Strike - S0154
Tags misp:name="Malware" misp-galaxy:mitre-malware="Cobalt Strike - S0154" misp:galaxy-name="Malware" misp:galaxy-type="mitre-malware"
Published indicators Network addresses are displayed in defanged form.
No file hashes or network indicators were published in this record.
Source observations Evidence class provider reported Source family label Cobalt Strike - S0154 Source confidence Not reported Observed 2024-10-23 11:51 UTC Retrieved 2026-10-08 06:10 UTC Evidence class provider reported Source family label Cobalt Strike - S0154 Source confidence Not reported Observed 2024-07-30 15:56 UTC Retrieved 2026-10-08 06:08 UTC Evidence class provider reported Source family label Cobalt Strike - S0154 Source confidence Not reported Observed 2023-07-13 11:00 UTC Retrieved 2026-10-08 05:42 UTC Evidence class provider reported Source family label Cobalt Strike - S0154 Source confidence Not reported Observed 2022-12-20 11:25 UTC Retrieved 2026-10-08 04:34 UTC Evidence class provider reported Source family label Cobalt Strike - S0154 Source confidence Not reported Observed 2022-12-08 13:06 UTC Retrieved 2026-10-08 04:33 UTC Evidence class provider reported Source family label Cobalt Strike - S0154 Source confidence Not reported Observed 2022-09-28 10:28 UTC Retrieved 2026-10-08 03:34 UTC