General
-
Target
2828-172-0x0000000002BB0000-0x0000000002BB1000-memory.dmp
-
Size
4KB
-
MD5
a539b76a749bb6d82cbdb13f4dff84d6
-
SHA1
2342595462e99c3a32e784eedda34898310718ae
-
SHA256
870df5bb4446deff4c90700846a8483b636f9ef1e9fbc84871208e62b8bf16a9
-
SHA512
cb26a770572b1151e1ac561fdf2186eca3c9522473bbc678e9eb6978d91204eee6d94fb5cad6dc5c7bd306c4dca2d44fc45418daae3f76d46d9f0c491d454883
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.221.169:654/NNSn
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; NP06)
Signatures
-
Cobaltstrike family
Files
-
2828-172-0x0000000002BB0000-0x0000000002BB1000-memory.dmp