General

  • Target

    payload.ps1

  • Size

    3KB

  • MD5

    6b28de4c2a0d7c9cefd864da96c7ff83

  • SHA1

    450ab6e7ae59fdaad3a79b609fc6aae4506d6422

  • SHA256

    fe6b3d3714828d122558576e44fe13d1dc646b0100382fe733e1494d74dbfd8c

  • SHA512

    21eb270090587b3d5eef4cbd835f88e482ca087d57e658c51d5fc16e66638bd4abd7c119617e399013762ed51197d0b73083be67c3cb7de573fddf29854e505b

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.130.121.136:8888/KvEW

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Signatures

Files

  • payload.ps1
    .ps1