General

  • Target

    2420-2-0x0000000002380000-0x00000000023CE000-memory.dmp

  • Size

    312KB

  • MD5

    0576947e6f0c51a2170052d5127f26b6

  • SHA1

    5cd16a460061f3f08ff9703ed54830f0a31f0159

  • SHA256

    c32cad1fe1e21c4f4661285a6508cbc23f27ec4f3054fbc9aa17ebea333d412f

  • SHA512

    2490ee94bbadd43d8f47a07130a245351bee35a502412f7b69ac92c479975500142b8db4ff2a0aa51854fadc0156bb127f7ca3b6ba96efa6cc3c579c965c2613

  • SSDEEP

    3072:ksYckn3Xzq4IDwSK2Mbn/gprEJwJNJsCwQTIfXouPruOOTRcusCJ9YJnrCoCe:ksYwjwIGIprEJweGTIDjhOTRcbc9hg

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2420-2-0x0000000002380000-0x00000000023CE000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections