Behavioral task
behavioral1
Sample
7a39763e68bc176f4a32f8ac3f2d92cd.ps1
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7a39763e68bc176f4a32f8ac3f2d92cd.ps1
Resource
win10v2004-20221111-en
General
-
Target
7a39763e68bc176f4a32f8ac3f2d92cd.ps1.vir
-
Size
4KB
-
MD5
7a39763e68bc176f4a32f8ac3f2d92cd
-
SHA1
5e3f3af42121a47026eb226f0a4db2f2f281e6fb
-
SHA256
9fa647159e8bfb852793d477389d120a8b8e3604860d3d85c2bdff9573a2764a
-
SHA512
84849b976fdc0baf81a79e4bf632f7f100011c9110360ea142d75040ccd072279c85e26841088e478d12e9c3cc851b4e16adf91f3ee7677e74bd79ea55053b1f
-
SSDEEP
96:VM87dzXYSHQskMEVJv9yYZ5ziH+4eQtLDBBOW/xBce9Tjeic7Bz9:R+SHMHVJv9yYZujeuLDBBDP99j89
Malware Config
Extracted
cobaltstrike
http://205.149.157.190:443/yandex
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
Signatures
-
Cobaltstrike family
Files
-
7a39763e68bc176f4a32f8ac3f2d92cd.ps1.vir.ps1