General

  • Target

    payload.ps1

  • Size

    3KB

  • MD5

    6832ac22607af7f4eccfec64ce865567

  • SHA1

    11e114738062ebef64aaa4132c59e55c69660622

  • SHA256

    ca15fcf9616a92b38e5f67ec94cc0b6a18523da2aa728c25380c9a31d53f4c94

  • SHA512

    2debe194f788227845bc3cc35095d65e2fb1ae2c530c88eea76ed3a03c150e55f116b29263ba0d83afe5e33dae3d4d1242b14e3cac66a51e1c7bfbf34ddcf971

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://114.116.101.84:85/yCKV

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASB)

Signatures

Files

  • payload.ps1
    .ps1