General

  • Target

    payload.ps1

  • Size

    3KB

  • MD5

    8da5f9fd40e27ead70101dfc32694137

  • SHA1

    8a0d2a9a764b2b49792675d445f1a020d9f06c89

  • SHA256

    70b163b51cc2eb395fe23a7689c91aebb9513c6b950ebff15cabdb89e128dbd9

  • SHA512

    0e5d7bac0c19425e169d66bb2d0fafd3d72fe1650c70a86682f655a2b19d82ed65d46c8512fabc0f164e35d24988db4a60ed8ece4c701b860b6e0de37ab3d8dd

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://118.25.18.151:80/jj6S

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727)

Signatures

Files

  • payload.ps1
    .ps1