General
-
Target
1368-0-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
MD5
48dde80ccd5fd593c3c7b66b06c4e132
-
SHA1
f18f4aef397f574fd49efe73584c4d18b0251b88
-
SHA256
158e381bc5ddfe53c6ff7e1296e3da5982c6081f962e6be28ab43b2248e82fa3
-
SHA512
bfe74c1ada4df3c6daa6d142c5bdbff9bbb0c3665fdb6169aeae861a91873099c978b718a592dd2cb12cfefa9a98267bce8f8d3b44ac67ac9da078d0161299f3
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://54.186.231.5:8000/h5Oq
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)
Signatures
-
Cobaltstrike family
Files
-
1368-0-0x0000000000020000-0x0000000000021000-memory.dmp