General

  • Target

    3748-377-0x000002156F990000-0x000002156F9DE000-memory.dmp

  • Size

    312KB

  • MD5

    5d33e26e038cade7445b6f9765d9a450

  • SHA1

    d5d386b694b4277220533de5d7a595c527330215

  • SHA256

    d6fa44bef0994866e2c871895634366b3ac945aec5b5cf063d05d7ed4ca38703

  • SHA512

    cfdf103b2f2dab6e02be4bc2f7ce340a4103dd74e45eb4351d7f86a0da85ebef26c9e1a94ca89f20100a2c66be152431093c055a24ff4a7c517c944addf03b40

  • SSDEEP

    3072:ksYckn3Xzq4IDwSK2Mbn/gprEJwJNJsCwQTIfXouPruOOTRbLJ9AYJ+rCotiiiiC:ksYwjwIGIprEJweGTIDjhOTR3Aw/

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3748-377-0x000002156F990000-0x000002156F9DE000-memory.dmp
    .dll windows x64


    Headers

    Sections