General

  • Target

    1476-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    8e66ef90c66d8cc10fa8e01900fea46e

  • SHA1

    ba8daea5b37d6ca8ab26cce304f090a63a3a94dd

  • SHA256

    44aa541c22618669d714eb5514558cc0313c5e7114aec5314483ac959849fbda

  • SHA512

    dc0a7c989578fb9e3d6f90147b8667f783947c0b561e7c50ab758732449dce33ecc5b002739b53a0cf42cb9183d6c8120b796083fcede45d32fe7cc666d6d600

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://57.154.15.121:1314/JYNl

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)

Signatures

Files

  • 1476-0-0x0000000000020000-0x0000000000021000-memory.dmp