General
-
Target
1476-0-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
MD5
8e66ef90c66d8cc10fa8e01900fea46e
-
SHA1
ba8daea5b37d6ca8ab26cce304f090a63a3a94dd
-
SHA256
44aa541c22618669d714eb5514558cc0313c5e7114aec5314483ac959849fbda
-
SHA512
dc0a7c989578fb9e3d6f90147b8667f783947c0b561e7c50ab758732449dce33ecc5b002739b53a0cf42cb9183d6c8120b796083fcede45d32fe7cc666d6d600
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://57.154.15.121:1314/JYNl
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)
Signatures
-
Cobaltstrike family
Files
-
1476-0-0x0000000000020000-0x0000000000021000-memory.dmp