General

  • Target

    dump_PE.bin

  • Size

    468KB

  • MD5

    2379b733f81a492cfd485810e499299d

  • SHA1

    ee497b907f9ee02174ae9c31bf5a96405f681377

  • SHA256

    2cebdfad9beac05766dde5d28faf8895f33de9cc1b3e27d7662c69ca1b60cc37

  • SHA512

    be808957703afb5bdf7c07200a3110d89a4df7c77e40089bd3180b5a6be34867d1b2a089fee674a6e60369d88fa4e648b9e6fc86c9530641c52a2a54ec4c6b30

  • SSDEEP

    12288:eTEX2eoX0qivXipJXcS4E9WQuxoaq2AW:eTEPoEqi/Q4E9WQGoa

Malware Config

Signatures

  • Cobaltstrike family
  • FlawedGraceRat Loader 1 IoCs

    Detects FlawedGraceRat x64 loader in memory.

  • Flawedgracerat family

Files

  • dump_PE.bin
    .dll windows x64

    7edbb1f08aaa2756392c6eb6a6201489


    Headers

    Imports

    Sections