General

  • Target

    payload.ps1

  • Size

    3KB

  • MD5

    b31620ece9d3d98c2668960870ac9454

  • SHA1

    377eadaeac3d675c8bc65755d885e333b0cfba93

  • SHA256

    c6d626ef46b6375fff5d715a1fad99f708ff76e87e35af527d06bc266704b699

  • SHA512

    e5e81c40b344a13a8b2b9e9a5f43296babb825a6214ac26b8650ea9b13325c3b4fec018faf4f0051e65c8e7f0eeef24577b038c258d1ae94ee58ccebf5a85365

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://107.172.96.251:6465/4Msi

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Signatures

Files

  • payload.ps1
    .ps1