Behavioral task
behavioral1
Sample
payload.ps1
Resource
win7-20230831-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.ps1
Resource
win10v2004-20230915-en
4 signatures
150 seconds
General
-
Target
payload.ps1
-
Size
3KB
-
MD5
6b28de4c2a0d7c9cefd864da96c7ff83
-
SHA1
450ab6e7ae59fdaad3a79b609fc6aae4506d6422
-
SHA256
fe6b3d3714828d122558576e44fe13d1dc646b0100382fe733e1494d74dbfd8c
-
SHA512
21eb270090587b3d5eef4cbd835f88e482ca087d57e658c51d5fc16e66638bd4abd7c119617e399013762ed51197d0b73083be67c3cb7de573fddf29854e505b
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://8.130.121.136:8888/KvEW
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)
Signatures
-
Cobaltstrike family
Files
-
payload.ps1.ps1