Behavioral task
behavioral1
Sample
payload.ps1
Resource
win7-20231020-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.ps1
Resource
win10v2004-20231020-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
payload.ps1
-
Size
3KB
-
MD5
8da5f9fd40e27ead70101dfc32694137
-
SHA1
8a0d2a9a764b2b49792675d445f1a020d9f06c89
-
SHA256
70b163b51cc2eb395fe23a7689c91aebb9513c6b950ebff15cabdb89e128dbd9
-
SHA512
0e5d7bac0c19425e169d66bb2d0fafd3d72fe1650c70a86682f655a2b19d82ed65d46c8512fabc0f164e35d24988db4a60ed8ece4c701b860b6e0de37ab3d8dd
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://118.25.18.151:80/jj6S
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike family
Files
-
payload.ps1.ps1