Behavioral task
behavioral1
Sample
payload.ps1
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.ps1
Resource
win10v2004-20240226-en
4 signatures
150 seconds
General
-
Target
payload.ps1
-
Size
3KB
-
MD5
b31620ece9d3d98c2668960870ac9454
-
SHA1
377eadaeac3d675c8bc65755d885e333b0cfba93
-
SHA256
c6d626ef46b6375fff5d715a1fad99f708ff76e87e35af527d06bc266704b699
-
SHA512
e5e81c40b344a13a8b2b9e9a5f43296babb825a6214ac26b8650ea9b13325c3b4fec018faf4f0051e65c8e7f0eeef24577b038c258d1ae94ee58ccebf5a85365
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://107.172.96.251:6465/4Msi
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike family
Files
-
payload.ps1.ps1