General
-
Target
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1
-
Size
3KB
-
Sample
240623-btw4tsthkf
-
MD5
464057f0e2c7f91bed00c5deb700dc93
-
SHA1
42c1a7aa0e4b4bac50650288cf1648726728b35e
-
SHA256
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b
-
SHA512
53a7976e082026e88c78c4f9e621401a515c5eda0823c76492d075d33a1630064dac282ac8b4e06c63e91a06f08bb9e597f3534b6e81f2fdd4ac87a10ac6e025
Behavioral task
behavioral1
Sample
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1
Resource
win10v2004-20240508-en
Malware Config
Extracted
cobaltstrike
http://116.114.20.180:8088/aaPK
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)
Targets
-
-
Target
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1
-
Size
3KB
-
MD5
464057f0e2c7f91bed00c5deb700dc93
-
SHA1
42c1a7aa0e4b4bac50650288cf1648726728b35e
-
SHA256
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b
-
SHA512
53a7976e082026e88c78c4f9e621401a515c5eda0823c76492d075d33a1630064dac282ac8b4e06c63e91a06f08bb9e597f3534b6e81f2fdd4ac87a10ac6e025
Score8/10-
Blocklisted process makes network request
-