General
-
Target
348-2-0x000001F71C730000-0x000001F71C830000-memory.dmp
-
Size
1024KB
-
MD5
66216d1dd43f804da84367f3d326a1df
-
SHA1
abce449ad384a2af8c925a972363dd8311ecbddc
-
SHA256
86ddf5c700c7d67d63aa719f22904cf96b83cec0d9bc13f8940ae4680859f062
-
SHA512
9431cb3eb039655dbbd4316b052b94d95a626faa94d903005c4f526689e15a035af3f699c7cb398e4185ace0c7c853ab853a9d6122877ba615fd402af783aff4
-
SSDEEP
6144:kaaOXm0qyDxiylqiiQxSrXbpMZtkPMmxG83zQu0vHuRCUSPVT:kbryDUyY1QxSrr7Qu0vHuRSVT
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://47.243.59.237:80/yi3H
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)
Signatures
-
Cobaltstrike family
Files
-
348-2-0x000001F71C730000-0x000001F71C830000-memory.dmp