General
-
Target
4236-0-0x000001750A820000-0x000001750A821000-memory.dmp
-
Size
4KB
-
Sample
240519-gn4vdade68
-
MD5
f819560cfb296d2bc3a3580d8e4f54d0
-
SHA1
1b25a22968bf144789884ad051f3d9cce14a7226
-
SHA256
3fb119a1dba5496bdedf0e7a6391116919d1e4a8ec3a2cbacfcccc04ccb3e248
-
SHA512
a006085de7b5982be7e30ef6d13b4acce8cee002390290c537dd0d23d0a418ef833fa951fd1b9a53073122295be0cec1c4ead649cf38ca7cc9fa308db6750e6a
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://47.122.9.214:443/Crush/v1.8/M5EL9GVH8H3
Attributes
-
user_agent
Accept: application/json, application/xhtml+xml, text/html Accept-Language: xh Accept-Encoding: *, gzip User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36