General

  • Target

    2828-0-0x0000011947090000-0x0000011947091000-memory.dmp

  • Size

    4KB

  • MD5

    96d9f9b568291f5ea84d167d473541a7

  • SHA1

    5ea78dc3fe7897215c45e157a19cf1691fde267f

  • SHA256

    e31d451e017c7c40f15f0fa69a2309c72f8ccc334fa7796134686414192f1eae

  • SHA512

    ad175cea958ccee6a412583e6ba521f87e2b5a29e5d71c562e5febb651e52c0514bdd4168362908916d4048be57d7b614ed3c781c793b4494dc96590f4b6f3b4

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.103.106.214:443/eOr7

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Signatures

Files

  • 2828-0-0x0000011947090000-0x0000011947091000-memory.dmp