General

  • Target

    2924-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • Sample

    240419-vmz2paah9w

  • MD5

    b4e31afa9a1d902764ee43b6b2e74715

  • SHA1

    1e319b672ef3d58aa8bead5590c7f96b3f09aa56

  • SHA256

    2c1980b8b387c13dc4ddd156f4284026e1fa657159cf8c9f9b0579ca3c191a31

  • SHA512

    0db39fc4ab5dd34e09ab8ed79100cb17a7ae8596c204b2cb32afcfaa2d36e45a105d30f28ac9774f3a21ff3b738742a5bb5539fbd2ef88fe340e963c0ce85271

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.120.39.182:63306/Gs3p

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)

Targets

    Tasks