Overview

overview

10

Static

static

10

2436-0-0x0...ry.dll

windows7-x64

1

2436-0-0x0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2436-0-0x0000000000110000-0x0000000000162000-memory.dmp

  • Size

    328KB

  • MD5

    25da425a12e4155221efcab32744ded0

  • SHA1

    ded2c5e3b48088a3b1f0f60b19fcea393ead25b2

  • SHA256

    44696350020a1a2687fc95624207905edc66a8d4ba4fc18f47c0ba8d52e0b87b

  • SHA512

    9a4739109fe3b40a8ab82c2a5c423c4409ebff56615407200a56909b290cd1a0482d43441c32402cbae823f0eecdd64c48a0b0caf3dacaca3aea7a91750d3fc6

  • SSDEEP

    3072:KzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnL7mi9hYJO6vzHk:KzbUWootfDCvT4ZTXzCLDhg

Score
10/10
0cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2436-0-0x0000000000110000-0x0000000000162000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections