Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:15:09 UTC
Home > List all groups > List all tools > List all groups using tool CobInt
 Tool: CobInt
Names
CobInt
COOLPANTS
Category Malware
Type Downloader
Description
(Proofpoint) CobInt is a downloader malware written in C. Its name is based on the
association of the malware with the “Cobalt Group” threat actor and an internal DLL
name of “int.dll” used in some of the samples. The malware can be broken up into three
stages: an initial downloader that downloads the main component, the main component
itself, and various additional modules.
Information
Malpedia AlienVault OTX Last change to this tool card: 10 July 2020
Download this tool card in JSON format
All groups using tool CobInt
Changed Name Country Observed
APT groups
 Cobalt Group 2016-Oct 2019
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5f33f6de-c7c2-4598-884e-96f2720c1db6
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5f33f6de-c7c2-4598-884e-96f2720c1db6
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5f33f6de-c7c2-4598-884e-96f2720c1db6
Page 2 of 2

APT groups Cobalt Group 2016-Oct 2019 
1 group listed (1 APT, 0 other, 0 unknown) 
   Page 1 of 2