Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4964-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    93a593a8f01ac9911396491c3becffb2

  • SHA1

    c45c42a2dfea3ea195d2ca9b795d6c3587aa97fb

  • SHA256

    0b894674b684ceafe78637a9d914c4d2bbc22ecb3c07042c624f1155f9002f0d

  • SHA512

    bac89e4343526ddd5560fb291e09168571a96375a432fdcbc877f775882f50b76ffd4011c96950964261ed65aef8a0a05adb1440c6f202a05307caaa4a418d48

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://82.156.199.229:40001/NQtJ

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0) Host: 82.156.199.229

Signatures

Files

  • 4964-0-0x0000000000020000-0x0000000000021000-memory.dmp