Behavioral task
behavioral1
Sample
3b30be75a36539c7b9f9b4b8fb5c28b0.ps1
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b30be75a36539c7b9f9b4b8fb5c28b0.ps1
Resource
win10v2004-20240802-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
3b30be75a36539c7b9f9b4b8fb5c28b0
-
Size
3KB
-
MD5
3b30be75a36539c7b9f9b4b8fb5c28b0
-
SHA1
2c4b0f7b6cd8a1932c43ee02d2df3dc9e93a7342
-
SHA256
1fdbb8e905dd0cb68c6c3eb817945c7db92f02b8891af1a0deaf75cbff37d419
-
SHA512
ce67a2f854002659d55e31819df0dc93b5872f2e786570c55b0ff242547efb168ee27fe0180bed0837557712861703f23f7db661edf6f36ffaf9a6297d4fef77
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://91.92.243.205:80/uZV8
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM)
Signatures
-
Cobaltstrike family
Files
-
3b30be75a36539c7b9f9b4b8fb5c28b0.ps1