{
	"id": "1a278b1c-e0c9-4e54-9e79-96117cc230de",
	"created_at": "2026-04-06T00:14:49.179953Z",
	"updated_at": "2026-04-10T03:24:23.512248Z",
	"deleted_at": null,
	"sha1_hash": "fc7355e71ee018f08fd0da0f3ebd7fc6e6e0e913",
	"title": "Medium",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 47861,
	"plain_text": "500\r\nApologies, but something went wrong on our\r\nend.\r\nRefresh the page, check Medium's site status, or find something interesting to\r\nread.\r\nOpen in app Sign up Sign in\r\nSearch\r\nTo make Medium work, we log user data. By using Medium, you agree to\r\nour Privacy Policy, including cookie policy.\r\nhttps://michaelkoczwara.medium.com/cobalt-strike-powershell-payload-analysis-eecf74b3c2f7\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://michaelkoczwara.medium.com/cobalt-strike-powershell-payload-analysis-eecf74b3c2f7"
	],
	"report_names": [
		"cobalt-strike-powershell-payload-analysis-eecf74b3c2f7"
	],
	"threat_actors": [
		{
			"id": "610a7295-3139-4f34-8cec-b3da40add480",
			"created_at": "2023-01-06T13:46:38.608142Z",
			"updated_at": "2026-04-10T02:00:03.03764Z",
			"deleted_at": null,
			"main_name": "Cobalt",
			"aliases": [
				"Cobalt Group",
				"Cobalt Gang",
				"GOLD KINGSWOOD",
				"COBALT SPIDER",
				"G0080",
				"Mule Libra"
			],
			"source_name": "MISPGALAXY:Cobalt",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434489,
	"ts_updated_at": 1775791463,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/fc7355e71ee018f08fd0da0f3ebd7fc6e6e0e913.pdf",
		"text": "https://archive.orkl.eu/fc7355e71ee018f08fd0da0f3ebd7fc6e6e0e913.txt",
		"img": "https://archive.orkl.eu/fc7355e71ee018f08fd0da0f3ebd7fc6e6e0e913.jpg"
	}
}