Behavioral task
behavioral1
Sample
ac8a5271c09dbfb1a486487743c6cec1a4c81ef56bf5e05d88b7d4b4d2e31482.ps1
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac8a5271c09dbfb1a486487743c6cec1a4c81ef56bf5e05d88b7d4b4d2e31482.ps1
Resource
win10v2004-20240412-en
General
-
Target
3372576f21e7cd0d4a5e4e7dd211dba0.bin
-
Size
2KB
-
MD5
8d11eadc2360e91a6f29003ec7b172f8
-
SHA1
3fc2aa52ffd70d2de49b2c3473131a0c94348fd0
-
SHA256
37feb4c6af3402e4c4cdb6c093b349888e3e33771d2f00815e664bda1b89fcab
-
SHA512
6260de3aae0299391e6ad20bd11fa0926298bcf5b2275e4e89be46a3c64b2a6866bf166fc1dacd9dd4e048d497c32455cee4943a2932b68c087986fa027c5660
Malware Config
Extracted
cobaltstrike
http://www.stylejason.com:2096/3bbf
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike family
Files
-
3372576f21e7cd0d4a5e4e7dd211dba0.bin.zip
Password: infected
-
ac8a5271c09dbfb1a486487743c6cec1a4c81ef56bf5e05d88b7d4b4d2e31482.ps1.ps1