General
-
Target
1372-63-0x000000001AFF0000-0x000000001AFF1000-memory.dmp
-
Size
4KB
-
MD5
34fafefd17cf2832cf28955a77d38741
-
SHA1
bc598a946cde8c46964745793751d7e0c46b3ebb
-
SHA256
e7102a85d6251cb94d14bc214884830c866ff698f9d481ad47793394c2a93d30
-
SHA512
134172f48390f9237a26cf426880c2188cf0a50feec70f8313bbdccf404fff3af93a2ffe57cddaa42c6be99e7fd411d24ea1b5a4c06f5333e0ab861052a393cc
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://43.136.14.33:50001/GSmV
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; UHS)
Signatures
-
Cobaltstrike family
Files
-
1372-63-0x000000001AFF0000-0x000000001AFF1000-memory.dmp