General

  • Target

    1368-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    48dde80ccd5fd593c3c7b66b06c4e132

  • SHA1

    f18f4aef397f574fd49efe73584c4d18b0251b88

  • SHA256

    158e381bc5ddfe53c6ff7e1296e3da5982c6081f962e6be28ab43b2248e82fa3

  • SHA512

    bfe74c1ada4df3c6daa6d142c5bdbff9bbb0c3665fdb6169aeae861a91873099c978b718a592dd2cb12cfefa9a98267bce8f8d3b44ac67ac9da078d0161299f3

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://54.186.231.5:8000/h5Oq

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Signatures

Files

  • 1368-0-0x0000000000020000-0x0000000000021000-memory.dmp