General

  • Target

    2040-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    6a8c94727ac2b92afa204497de99bb60

  • SHA1

    ad4e4e77020fc080ddb61be088e0557a70a84817

  • SHA256

    e98df09d8019e52fbc44136b3c37a5a660f37677e9cd08a57d93cc74f2fe2e83

  • SHA512

    0c2ee0c261cbb94227276e69e7d66344d382314ef822359de0ede3c9a848e731e412efddc198cd7bf45918c151d26d02fbf29b358cc71f01b461605f81b37f71

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://146.190.120.217:2369/QfDb

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)

Signatures

Files

  • 2040-0-0x0000000000020000-0x0000000000021000-memory.dmp