cobaltstrike | temp[.]ps1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
temp.ps1
Size 3KB
Sample210619-d522t3tjw2
SHA256 e8c249cdd05e1d7366f263a0de0ff5f376eaaa13d29614f835b10f3cabacfcb3
MD5 6b023e848ba01d1794883a1fb134a338
SHA1 a27376caf193f849d552c845cd82e5301f722400
SHA512 a5bdf2d89cfc7437c22047d32ac3da45c0b00549ea2787325058647a03d4cb60d293e1bc8cb5a7f3edc46c76aa65984d709f9833086b190e3af57912770946a4
MD5 SHA1 SHA512

Score

10^/10

cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://198.13.63.107:4445/BejL

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Signatures

Cobaltstrike family
cobaltstrike

File Explorer

temp.ps1

.ps1 3KB

temp.ps1

SHA256 e8c249cdd05e1d7366f263a0de0ff5f376eaaa13d29614f835b10f3cabacfcb3
MD5 6b023e848ba01d1794883a1fb134a338
SHA1 a27376caf193f849d552c845cd82e5301f722400
SHA512 a5bdf2d89cfc7437c22047d32ac3da45c0b00549ea2787325058647a03d4cb60d293e1bc8cb5a7f3edc46c76aa65984d709f9833086b190e3af57912770946a4
MD5 SHA1 SHA512