General
-
Target
2036-0-0x0000000028A90000-0x0000000028A91000-memory.dmp
-
Size
4KB
-
MD5
503bf725be8c6eb1810da3d7a2fda21c
-
SHA1
e8d5ecf513a7e9848abecf1e0ea0fb6d87d18e70
-
SHA256
e61777d109f530ff8c2607487d1f35f029c798fdd78a7a61b0eb17e1abb30bc9
-
SHA512
e82f3e40842c1f6f60f468633502307ab0a1ec8dd9223b5dd366475be8cf1d3b47cb892ae8ad2efa1763f28b10fc18c5c1688a7a6519f74d52dd645f5e60cc07
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://1.14.192.93:443/Rpc
Attributes
-
user_agent
Host: outlook.live.com Accept: */* User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko)
Signatures
-
Cobaltstrike family
Files
-
2036-0-0x0000000028A90000-0x0000000028A91000-memory.dmp