General

  • Target

    1428-56-0x0000000001C10000-0x0000000001CB1000-memory.dmp

  • Size

    644KB

  • MD5

    ae351b1f0f279cea6c1919cf07f0429f

  • SHA1

    94623382d0fb5b355c7532410437a8a10acbf43e

  • SHA256

    1492e4ac1c75272370bab0eb0da5c6f1abaf308891f57ab07c52f329c19f18d2

  • SHA512

    bb3ce828380f1d3a9924833e12077d52da05217189b8d8cb43965a78e992b893b864986186507908370765d93c2ad0808bcb36f542cd71602ea9c08a7206a454

  • SSDEEP

    12288:aN3Ohhf6F7ALFxTrqn5geHcWFH1KTkvmULzXjBIssbMs:DmF7UFxTr+5x8qHMTkvDFI

Malware Config

Signatures

  • Cobaltstrike family
  • FlawedGraceRat Loader 1 IoCs

    Detects FlawedGraceRat x64 loader in memory.

  • Flawedgracerat family

Files

  • 1428-56-0x0000000001C10000-0x0000000001CB1000-memory.dmp