Overview

overview

10

Static

static

10

Payload_Triage.ps1

windows7-x64

10

Payload_Triage.ps1

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Payload_Triage.ps1

  • Size

    3KB

  • MD5

    b6c301e4280ec8cb08425d2baca27f7f

  • SHA1

    5e3eb99830fa36d06d5234d77f0400c99c6d962a

  • SHA256

    69d048e31c2cb65d71adaf08a5b6c5e922b426af5817a8dd64733caedf643f1f

  • SHA512

    c64d285897e898b57678a428210a16ab77db9ec77f1df43d43e81fa4a44b4d3468b5b05785103ac35f519d5eb541443e8bf7eb0d8bce5e8803cfc6720f72d5c4

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://79.132.130.60:443/wt-assets/static-files/compliance/components.js

Attributes
  • user_agent

    Host: oneblackwood.com Connection: close Accept: */* Accept-Encoding: gzip, deflate, br Cache-Control: max-age=0 X-Test: BMXZz59WFk3rVnG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edge/115.0.1901.20

Signatures

Files

  • Payload_Triage.ps1
    .ps1