Overview

overview

10

Static

static

10

2924-2-0x0...ry.dll

windows7-x64

1

2924-2-0x0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2924-2-0x0000000028CD0000-0x0000000028D1F000-memory.dmp

  • Size

    316KB

  • MD5

    27758a2c2eeba22f1c880972e2625473

  • SHA1

    cd652b64933056c962748762cda9f7336fdf6c81

  • SHA256

    7c691f7e9306ac1bb875eec05be2a09c1019e61c2af96d16d5064f9ffcc6ff4c

  • SHA512

    e2e332e182a348c63c50c1ac5def5266d970d53db42b0b641ad1491fa219b2c1ad0c5e37407bbfcadaa769422d3024c4e46b6a5e3f09d2be5e8812d3aebd0371

  • SSDEEP

    6144:uJqXG5d1Ip8yibgkTZI6jHID90a0jPdsH/:u9d6devoxkjPdq

Score
10/10
0cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2924-2-0x0000000028CD0000-0x0000000028D1F000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections