General

  • Target

    1368-55-0x00000000021F0000-0x0000000002662000-memory.dmp

  • Size

    4.4MB

  • MD5

    d35a711d0bc3b93f6eebbc34e82f4f3d

  • SHA1

    26ec3637ab284fe6067bfe2e1cb1a8b1f8b2611c

  • SHA256

    64ac0d65099b2570bbd505d17e3ef5d0512df7b617064924416bcf1a2d29a1b1

  • SHA512

    bd73a1f422dbbf955129055af721c3c766a33a75376fc87ecad3df4e59f5508dfdab7e49b305fcc2adda35b3369d7927f3cb3ad6e149278c39c2330244359359

  • SSDEEP

    3072:eNhWKHXsrtEaLjXIuTvYdJN5yFxTWzHV5/E3t34XPPNLYJNzeITisOe0Augq:eNhWBXXI2YdYTW7s3qXtLsTiLAu

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1368-55-0x00000000021F0000-0x0000000002662000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections