Overview

overview

10

Static

static

p.ps1

windows7-x64

8

p.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    p.ps1

  • Size

    363KB

  • Sample

    221205-hxcmxsff35

  • MD5

    e8597763909e2378145645b86f0db4fe

  • SHA1

    a57a6a754675d3f16d4bedf8a9a535d25f7e21d6

  • SHA256

    30690dc89f08908c0587d010cbdbfd5689d7896c0599488987f4a9b1893b5e12

  • SHA512

    b32c073e351816d05a00c7aefe2326501d23394d76ddfeb1165510c55cf5f33618894a19c1438cfe9cc8d1380c6c7f03457c4613583a65b949d6aa32abbcd92b

  • SSDEEP

    6144:jxnYL4aKM8mJDjpkm7Rk0Lc6O22Da2ib6lzlkBb:jxgVNJDjum9kr6iuC8

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      p.ps1

    • Size

      363KB

    • MD5

      e8597763909e2378145645b86f0db4fe

    • SHA1

      a57a6a754675d3f16d4bedf8a9a535d25f7e21d6

    • SHA256

      30690dc89f08908c0587d010cbdbfd5689d7896c0599488987f4a9b1893b5e12

    • SHA512

      b32c073e351816d05a00c7aefe2326501d23394d76ddfeb1165510c55cf5f33618894a19c1438cfe9cc8d1380c6c7f03457c4613583a65b949d6aa32abbcd92b

    • SSDEEP

      6144:jxnYL4aKM8mJDjpkm7Rk0Lc6O22Da2ib6lzlkBb:jxgVNJDjum9kr6iuC8

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks