Behavioral task
behavioral1
Sample
eryao7.ps1
Resource
win7-20230220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
eryao7.ps1
Resource
win10v2004-20230220-en
4 signatures
150 seconds
General
-
Target
eryao7.ps1
-
Size
3KB
-
MD5
f368051550d028d2ffcbdd7cda02c78e
-
SHA1
27fea57d9e7088c881ee6a79ab5c4958562b6237
-
SHA256
8cf1e49c74fb05de954a6b70281f47e3cbd021108b0ee11f4a59667ff28bfee9
-
SHA512
b253ecf1ff71aa9b977cbae38e2a5bac060c1f7cb2674e43053c3a56e3a7f3369c6d67c1514be6528ed0376a4c8b534e7ac3dde7d3150168421c2ec8db1871df
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://123.56.82.231:8080/4nyB
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Signatures
-
Cobaltstrike family
Files
-
eryao7.ps1.ps1