A script found in malicious ads reveals signs of Cobalt Strike and ransomware, according to a Malwarebytes researcher.