Overview

overview

10

Static

static

10

2600-64-0x...ry.dll

windows7-x64

1

2600-64-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2600-64-0x000007FEF74F0000-0x000007FEF759C000-memory.dmp

  • Size

    688KB

  • MD5

    fa869d0e7e020cca4ce4dc96630012aa

  • SHA1

    8132cc86ccd34071894dddf2c023a38a46be2963

  • SHA256

    3921b45f96b892ce9491e78597bd87e6befce4890b177d10a306a61cbd2a6031

  • SHA512

    0dc53a8562a7db489d2042b507633fe3c62c72c7125d3cf8119f9da5aba0031a07ae475b9171a7d7d2a9219c8c87738e69f2b24873df8e60877907a425f37a61

  • SSDEEP

    12288:qEfOMJ8PhGnffH3fVZ45CqjbIS0wSJSkORCXdpVo2GN:7fO3JdbjbIpwSTOWfVPy

Score
10/10
0cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2600-64-0x000007FEF74F0000-0x000007FEF759C000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections