General

  • Target

    2036-0-0x0000000028A90000-0x0000000028A91000-memory.dmp

  • Size

    4KB

  • MD5

    503bf725be8c6eb1810da3d7a2fda21c

  • SHA1

    e8d5ecf513a7e9848abecf1e0ea0fb6d87d18e70

  • SHA256

    e61777d109f530ff8c2607487d1f35f029c798fdd78a7a61b0eb17e1abb30bc9

  • SHA512

    e82f3e40842c1f6f60f468633502307ab0a1ec8dd9223b5dd366475be8cf1d3b47cb892ae8ad2efa1763f28b10fc18c5c1688a7a6519f74d52dd645f5e60cc07

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://1.14.192.93:443/Rpc

Attributes
  • user_agent

    Host: outlook.live.com Accept: */* User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko)

Signatures

Files

  • 2036-0-0x0000000028A90000-0x0000000028A91000-memory.dmp