General

  • Target

    4032-47-0x000002181BD90000-0x000002181BD91000-memory.dmp

  • Size

    4KB

  • MD5

    5146aa3442abf353a0741b1cd356ec4f

  • SHA1

    5f275960f28f9633698c0bda8455804845abd7d2

  • SHA256

    771bde8c7968981faf9e241ec1ed37b763869521dc561b57e0c6447c9fd4f7e5

  • SHA512

    e7eeadc213d5dcf2761f0b284f19fc3ef98e8e89565ef4efc8cb6bf0f77abfdd4093712bd847f26b991bc8d8f89930e425a0d199a3523bd555f3795a0870f7e4

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://123.60.162.164:80/qs5D

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP09; NP09; MAAU)

Signatures

Files

  • 4032-47-0x000002181BD90000-0x000002181BD91000-memory.dmp