General
-
Target
1232-54-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
MD5
e5ac75da454d3f1c162a2421e98efde1
-
SHA1
dd95081beb626d91de2237f438651e379d527722
-
SHA256
4565928daccaad28394ef40ee9f5f84b64e905ccf948c716918f53e20b2ab65b
-
SHA512
6bd32f6fa4efd990592bd3540d3281692a96b62f3fa69888e1ba3eff5a6d0f6799e057e29a5d3ecaba6ffccad36d320b7cd9fe69ea0e831394cedd368eb6fbd7
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://42.192.222.92:4433/jYIQ
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)
Signatures
-
Cobaltstrike family
Files
-
1232-54-0x0000000000020000-0x0000000000021000-memory.dmp