ThreatFox Database

Indicators of Compromise (IOCs) on ThreatFox are usually associated with certain tags. Every IOC can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of IOCs in the ThreatFox corpus. The page below gives you an overview on IOCs that are tagged with CobaltStrike.

You can also get this data through the ThreatFox API.

Database Entry


Tag:CobaltStrike
First seen:2020-12-06 08:15:53 UTC
Last seen:2024-03-18 22:12:50 UTC
Sightings:81'396

Indicators Of Compromise


The table below shows all indicators of compromise (IOCs) that are associated with this particulare tag (max 1000).

Date (UTC)IOCMalwareTagsReporter