General

  • Target

    2828-172-0x0000000002BB0000-0x0000000002BB1000-memory.dmp

  • Size

    4KB

  • MD5

    a539b76a749bb6d82cbdb13f4dff84d6

  • SHA1

    2342595462e99c3a32e784eedda34898310718ae

  • SHA256

    870df5bb4446deff4c90700846a8483b636f9ef1e9fbc84871208e62b8bf16a9

  • SHA512

    cb26a770572b1151e1ac561fdf2186eca3c9522473bbc678e9eb6978d91204eee6d94fb5cad6dc5c7bd306c4dca2d44fc45418daae3f76d46d9f0c491d454883

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.221.169:654/NNSn

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; NP06)

Signatures

Files

  • 2828-172-0x0000000002BB0000-0x0000000002BB1000-memory.dmp