General
-
Target
1228-55-0x00000000003A0000-0x00000000003DE000-memory.dmp
-
Size
248KB
-
MD5
5cb9238dc77f60a232b6e5dd0e12806a
-
SHA1
2885bdfc9cdb318a18ced2fa8e475be95f54979c
-
SHA256
242d70d1d13856184bdd1ecac2dde90f4f215792d23d01045735cb6d569ede0e
-
SHA512
15819e4b1d94da95fd303c43f6568cbb1ec05dfab75de0e6643d2c1800964c1e793c05703e9a9a7a7ece73fef6a6e13f55d09978f6fbf346d0f4093a5c97dc60
-
SSDEEP
3072:lBNIVBXuQG3juybT8Cgzn/ZaAbo/V2tM7/WLcmLBjFUD5VcGj:luXuX3Pn8Cg/ZJbayMyLcm9j
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1228-55-0x00000000003A0000-0x00000000003DE000-memory.dmp
Headers
Sections