Behavioral task
behavioral1
Sample
2e34a818b72839d75132c01ce6f1dd35.ps1
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2e34a818b72839d75132c01ce6f1dd35.ps1
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
2e34a818b72839d75132c01ce6f1dd35
-
Size
3KB
-
MD5
2e34a818b72839d75132c01ce6f1dd35
-
SHA1
4e0d4626960de063efa3ffc1987c9ec8511a4058
-
SHA256
dd556dc0a1acb7ef8b59939c7de4d0f918a321205edbccde78e781d2a621d740
-
SHA512
d6859ff0105139d98c4953ca985853aa2571668581cafe2d06f86fdce450f41ac918da69c6248efbc376a58fa169555707ab18af6e5b16e7e3102d6fc05cddad
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://dagaiba.xyz:2096/GmUT
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike family
Files
-
2e34a818b72839d75132c01ce6f1dd35.ps1