General
-
Target
2268-0-0x00000000003D0000-0x00000000003D1000-memory.dmp
-
Size
4KB
-
Sample
240524-rktkcaha47
-
MD5
6920520e2d4312bc9cf14957f1945c8d
-
SHA1
b40d9a8235c10c5eea3e19a4618c5e01028c45f1
-
SHA256
ea237c102a8b9acce946616abe75ac42f6cc93c42ba23963f5c7111b9be18c09
-
SHA512
c89c7908a7a4b2acda7c26269f7b7c8d25d0c587b3846b4fe9a2043eeb6bff2835e7908983b82b45a815faa3ca4de81cf3555abe9047b25c21b473eb110ccdba
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://43.138.234.160:8088/center/user_sid
Attributes
-
user_agent
Accept: */* Accept-Language: en-US,en;q=0.5 Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4472.114 Safari/537.36