General

  • Target

    2012-54-0x0000000000690000-0x0000000000691000-memory.dmp

  • Size

    4KB

  • MD5

    b9b9d18c1a757d264c2ca1f39e187ab2

  • SHA1

    8e75daf284e2cbef35cd08b9426ba30c33c23c38

  • SHA256

    e7191fd7f7ad1d283688a0be30c1425dd357ccdaa549cb9823b51792927f90c5

  • SHA512

    fa798759b6f2dbf5edf295b9d087910fc210c901f33aa43912900ca40dd66488e3735fd1790855f17f70270ed01bc6b96cbeb9e87eedd9dc0eaea4a53c1c89bd

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.236.19.63:443/9Avm

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM)

Signatures

Files

  • 2012-54-0x0000000000690000-0x0000000000691000-memory.dmp