Behavioral task
behavioral1
Sample
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1
Resource
win7-20231129-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
464057f0e2c7f91bed00c5deb700dc93.bin
-
Size
2KB
-
MD5
19e6899da1c4618b5cbd6dd4f0d205e1
-
SHA1
3a1bec1a027f5786aca80ac586bb8794160a6c0e
-
SHA256
9430f3d0efa6f2f0a09cacdd780c45ee4863c169e8091703556086276d5b54e7
-
SHA512
c4f8990aaed7d5b9fb080645066ae1bd95f1b2cb30d6c6908aaf5b954cc49e97331f2c78609e5434b137090869bde0e3fd237d0afe0ab87f9e62408f42699dcb
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://116.114.20.180:8088/aaPK
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)
Signatures
-
Cobaltstrike family
Files
-
464057f0e2c7f91bed00c5deb700dc93.bin.zip
Password: infected
-
ee417a1cb4f2fa2dbb65b8a03a7e35e0a1c3215e331aa0de227e206f1e41ee8b.ps1.ps1