General
-
Target
4032-47-0x000002181BD90000-0x000002181BD91000-memory.dmp
-
Size
4KB
-
MD5
5146aa3442abf353a0741b1cd356ec4f
-
SHA1
5f275960f28f9633698c0bda8455804845abd7d2
-
SHA256
771bde8c7968981faf9e241ec1ed37b763869521dc561b57e0c6447c9fd4f7e5
-
SHA512
e7eeadc213d5dcf2761f0b284f19fc3ef98e8e89565ef4efc8cb6bf0f77abfdd4093712bd847f26b991bc8d8f89930e425a0d199a3523bd555f3795a0870f7e4
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://123.60.162.164:80/qs5D
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP09; NP09; MAAU)
Signatures
-
Cobaltstrike family
Files
-
4032-47-0x000002181BD90000-0x000002181BD91000-memory.dmp