General

  • Target

    2096-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    850884574b6881d7d51e4154911b9cdb

  • SHA1

    ed602d8e2574639886ae2328f999124291561ec8

  • SHA256

    cf5447361dc2c417e083b3cbcb77ebb1e47fcc85aa08bb918bff9a72e1bfe82e

  • SHA512

    6974e35ed4b9a8b584c77a5a8417a001466cf7d9fb01165db0cfd18dfa253e4473af8d7059b6c48dcfdec16ba851a855d6207844731f69f55a4e85eb9d4ffc08

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.185.249.119:4434/fFLe

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts; IE0006_ver1;EN_GB)

Signatures

Files

  • 2096-0-0x0000000000020000-0x0000000000021000-memory.dmp