Overview

overview

10

Static

static

10

payload.ps1

windows7-x64

10

payload.ps1

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    payload.ps1

  • Size

    3KB

  • MD5

    a7e7dd22ba6f2bffb04b21b2b4ad4958

  • SHA1

    72c19949c4a9cd8f7e322444c5f8e9694f6b2b74

  • SHA256

    318a18f5ff00b7129bcbf5f4241c8fae13b00ba6915444ee717b084903f04b1e

  • SHA512

    5e31d794cfe1776601f60bc94dff91dd91ef11a8c800fc5d83d4d2cc5365a29199a6efdba9cc6612844d89e6f7ce3a9236802bff60868efa074e839f19a1ee08

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.146.179.109:5858/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; MALEJS; rv:11.0) like Gecko

Signatures

Files

  • payload.ps1
    .ps1