Behavioral task
behavioral1
Sample
52798c8473db47748d09d0f4052eec08.ps1
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
52798c8473db47748d09d0f4052eec08.ps1
Resource
win10v2004-20231215-en
4 signatures
150 seconds
General
-
Target
52798c8473db47748d09d0f4052eec08
-
Size
5KB
-
MD5
52798c8473db47748d09d0f4052eec08
-
SHA1
868fcf7f24710c2cf34ddf0fd8e9009059cad3ba
-
SHA256
156e24bd67728a5de26f7e141b24f982c3c2c3c90b10a02fd941c039f4e7fc48
-
SHA512
c2e44a03a8d51140e9755051a7c8bce609974900eafcd3e71f1ec3c5d8a1594f2b0ef5589a2c5a1e24f0fe5ceba7941f6113f443526c301911c7c893efb268e4
-
SSDEEP
96:NJvvOmYe55kOFYyuE/H66ZniEDQODYDYD2YH0lzN0li:DvOI55vy16Qwee2VcU
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://103.56.19.130:4445/MwML
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Signatures
-
Cobaltstrike family
Files
-
52798c8473db47748d09d0f4052eec08.ps1