General

  • Target

    2092-18-0x0000000003740000-0x000000000377E000-memory.dmp

  • Size

    248KB

  • MD5

    844d41a946ede770071fe75f42b14f48

  • SHA1

    3444e270134ac4a95b30ec68c149c1217fd4f43d

  • SHA256

    2d0a25d30ffe4d215e1b4ef6bea38ffb9a755503b86906c03bb37450ab9f0b89

  • SHA512

    9519054b80f02022bb225e4695eae15a250bdc43d104f73a925a50a6f9d65a2380437e1ba510ffc90f76dd29ae81828c3c073a86abf88aedbbd826a2373aec06

  • SSDEEP

    3072:arjm9Z4rfIcZxU8CD7keMAU8YMvhQEFjNhb1jTAKA7jZUdKY5Dwh:arTfIO28CvkbAU8YMvhl1jT3A7je+h

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2092-18-0x0000000003740000-0x000000000377E000-memory.dmp
    .dll windows:5 windows x86


    Headers

    Sections