General

  • Target

    1664-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    cafddbfac5e660054601b36ac0e1feb3

  • SHA1

    fc5f11ed9db85ba032947612c37955ffa3539bfc

  • SHA256

    a49d2964a16fc2238358796e3756ea88bc6c13f4a886e51e982b51b025aa37d2

  • SHA512

    14be1ab0ce800cb18bb0bf9d528504c1b355cfeede1f8e52c4d0b1e1dcd5c96099cec7e4a52c439f8b0908375e755b981cab3a1454b9f04b8a452ab5ecf01d78

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://3.208.96.244:80/Meeting/32251816/

Attributes
  • user_agent

    Accept: */* Accept-Language: en-US Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/587.38 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36

Signatures

Files

  • 1664-0-0x0000000000020000-0x0000000000021000-memory.dmp