General

  • Target

    payloadx64ps1.ps1

  • Size

    3KB

  • MD5

    b30b86d1b5313f5858f660f4d965eb1f

  • SHA1

    2ec5c95b8a51ddb90fd2c2394711aa11f3cb6173

  • SHA256

    278f3a4eaeac603f2a8ad55c1673397be14459876eb6ce65d0f5f1380eeb36cc

  • SHA512

    10fe17b502a7385e7f3c8c65a666f5cc0014436bb057e2de9d0216de4fb4fd5f7e9a946c063862c0f74de402f8b379b9e981a794fe0cdcd25a259d91a8d60b55

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.219.229.99:443/api/2

Attributes
  • user_agent

    Host: n0tion.link User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Signatures

Files

  • payloadx64ps1.ps1
    .ps1