General

  • Target

    5008-133-0x00007FFD72E80000-0x00007FFD72F0D000-memory.dmp

  • Size

    564KB

  • MD5

    a2ed90837cf50d83dbe1adb2447ec019

  • SHA1

    27aa7263cad96bc95bdb8bbbc22d9df0d8d90704

  • SHA256

    e918ef35667340f150ccf035fa623cd6c6e83643d1925c32d6f10ee98288ab3a

  • SHA512

    122ae4520fd72ca8782a4f388133af3beebe3c347df5e061b9f2a2aece047163043362d93c81e7b484fd876ab6c104171cfeaa5e9c194173fd35784583ac5a56

  • SSDEEP

    6144:UzbUisfDCvT4ZTXzCLE9/rKMFlEHS1ufC86:UkfOMJ8E9Ttmy58

Score
10/10

Malware Config

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5008-133-0x00007FFD72E80000-0x00007FFD72F0D000-memory.dmp
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections