General

  • Target

    1232-54-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    e5ac75da454d3f1c162a2421e98efde1

  • SHA1

    dd95081beb626d91de2237f438651e379d527722

  • SHA256

    4565928daccaad28394ef40ee9f5f84b64e905ccf948c716918f53e20b2ab65b

  • SHA512

    6bd32f6fa4efd990592bd3540d3281692a96b62f3fa69888e1ba3eff5a6d0f6799e057e29a5d3ecaba6ffccad36d320b7cd9fe69ea0e831394cedd368eb6fbd7

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://42.192.222.92:4433/jYIQ

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

Files

  • 1232-54-0x0000000000020000-0x0000000000021000-memory.dmp