Behavioral task
behavioral1
Sample
payload.ps1
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.ps1
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
payload.ps1
-
Size
3KB
-
MD5
6832ac22607af7f4eccfec64ce865567
-
SHA1
11e114738062ebef64aaa4132c59e55c69660622
-
SHA256
ca15fcf9616a92b38e5f67ec94cc0b6a18523da2aa728c25380c9a31d53f4c94
-
SHA512
2debe194f788227845bc3cc35095d65e2fb1ae2c530c88eea76ed3a03c150e55f116b29263ba0d83afe5e33dae3d4d1242b14e3cac66a51e1c7bfbf34ddcf971
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://114.116.101.84:85/yCKV
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASB)
Signatures
-
Cobaltstrike family
Files
-
payload.ps1.ps1