Behavioral task
behavioral1
Sample
payload.ps1
Resource
win7-20230712-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.ps1
Resource
win10v2004-20230703-en
5 signatures
150 seconds
General
-
Target
payload.ps1
-
Size
3KB
-
MD5
87aeac5411487e5e7b211b7ef28785a7
-
SHA1
ca2f7617d6525a367a74e381d67bb5325d9f536c
-
SHA256
9f1b59b898ef2c3dab630a3d38d051292c6cfa31a72621b5743310a8e1fed657
-
SHA512
d0eec2c114a1081f080583678e4f12cff2a2141cd67fc0ad98196375b0e9fc5db5ef92a9822adbb50c18393b909ed281324023bde8b6e957865f220b8ebebe6c
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://8.130.28.93:80/ASSv
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)
Signatures
-
Cobaltstrike family
Files
-
payload.ps1.ps1