General

  • Target

    1360-0-0x000001B5EAA90000-0x000001B5EAA91000-memory.dmp

  • Size

    4KB

  • MD5

    ae127053b90fe44e909b084d9cfe2976

  • SHA1

    6d1bcf9b8021a5a841e36929651fd9b5aa9b0211

  • SHA256

    56b3d52c711560ce8c0700f4abc26a9abfa481682ff30b54d30d5c5804373eac

  • SHA512

    2960638e150c0b2f888e436f4752f5b04b9aeff1ed7fccaec44848427dfe78023571e0347ee40cb6b9802dd28a344cd3a15296df3cceee6e38abce29cb8e29d4

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.120.35.167:7777/NJRs

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MAAU; NP08)

Signatures

Files

  • 1360-0-0x000001B5EAA90000-0x000001B5EAA91000-memory.dmp