General
-
Target
1664-0-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
MD5
cafddbfac5e660054601b36ac0e1feb3
-
SHA1
fc5f11ed9db85ba032947612c37955ffa3539bfc
-
SHA256
a49d2964a16fc2238358796e3756ea88bc6c13f4a886e51e982b51b025aa37d2
-
SHA512
14be1ab0ce800cb18bb0bf9d528504c1b355cfeede1f8e52c4d0b1e1dcd5c96099cec7e4a52c439f8b0908375e755b981cab3a1454b9f04b8a452ab5ecf01d78
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://3.208.96.244:80/Meeting/32251816/
Attributes
-
user_agent
Accept: */* Accept-Language: en-US Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/587.38 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Signatures
-
Cobaltstrike family
Files
-
1664-0-0x0000000000020000-0x0000000000021000-memory.dmp