General

  • Target

    1372-63-0x000000001AFF0000-0x000000001AFF1000-memory.dmp

  • Size

    4KB

  • MD5

    34fafefd17cf2832cf28955a77d38741

  • SHA1

    bc598a946cde8c46964745793751d7e0c46b3ebb

  • SHA256

    e7102a85d6251cb94d14bc214884830c866ff698f9d481ad47793394c2a93d30

  • SHA512

    134172f48390f9237a26cf426880c2188cf0a50feec70f8313bbdccf404fff3af93a2ffe57cddaa42c6be99e7fd411d24ea1b5a4c06f5333e0ab861052a393cc

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.136.14.33:50001/GSmV

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; UHS)

Signatures

Files

  • 1372-63-0x000000001AFF0000-0x000000001AFF1000-memory.dmp