1888-57-0x0000000001C00000-0x0000000001CA1000-memory.dmp
- SHA256 411cf5f7b5164f34b583e0ddbe89d1895734204ab72239b9e4522cf193edea10
-
FlawedGraceRat Loader
Detects FlawedGraceRat x64 loader in memory.
General
- Target 1888-57-0x0000000001C00000-0x0000000001CA1000-memory.dmp
- Size 644KB
- Sample221208-bt2z3sgf84
- SHA256 411cf5f7b5164f34b583e0ddbe89d1895734204ab72239b9e4522cf193edea10
- MD5 087ba96fdd49f7d55df53a36de93dbd7
- SHA1 be32ca0488fcea5fd8d95eb5982009a543d69847
- SHA512 ed06946c0c4b6a5f3af5e2a930e5c0de62b196956134a918d934615d32a4ea0932a25bf90759f0ae4555169f1ec4e95e80c270f3bd03f518050ae5a0084981b4
- SSDEEP 12288:QdVKJjZG3IRvTWDg86rqnHg2sj7HD64u5bLmXaw+vcL/FPdOmucAKV:QiRlvTeL6r+HK7H+pmXaBWtPAxz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Cobaltstrike family
-
resource yara_rule sample flawgrace_loader_x64 - Flawedgracerat family
File Explorer
-
1888-57-0x0000000001C00000-0x0000000001CA1000-memory.dmp644KB