Behavioral task
behavioral1
Sample
payloadx64ps1.ps1
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
payloadx64ps1.ps1
Resource
win10v2004-20231222-en
4 signatures
150 seconds
General
-
Target
payloadx64ps1.ps1
-
Size
3KB
-
MD5
b30b86d1b5313f5858f660f4d965eb1f
-
SHA1
2ec5c95b8a51ddb90fd2c2394711aa11f3cb6173
-
SHA256
278f3a4eaeac603f2a8ad55c1673397be14459876eb6ce65d0f5f1380eeb36cc
-
SHA512
10fe17b502a7385e7f3c8c65a666f5cc0014436bb057e2de9d0216de4fb4fd5f7e9a946c063862c0f74de402f8b379b9e981a794fe0cdcd25a259d91a8d60b55
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://8.219.229.99:443/api/2
Attributes
-
user_agent
Host: n0tion.link User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Signatures
-
Cobaltstrike family
Files
-
payloadx64ps1.ps1.ps1