General

  • Target

    2068-1-0x00000000003B0000-0x00000000003EE000-memory.dmp

  • Size

    248KB

  • MD5

    6f7e8456847805b1442780a1fce3bd1b

  • SHA1

    4839cd67ddfde8a9a41796c7a752f07161bb6392

  • SHA256

    ff4415c916f63f96be4164e751819060ae8e9902958a71ccadc28e8c4162720c

  • SHA512

    e034a5b353f64afa741d6e2e2fc3d72ed45a5d65215b922db20989f6d8997421fc6aa5253d79c6ff1677f1b22d2ff05d6b98887fd76c197e5cb44130a0909e88

  • SSDEEP

    3072:0+oRFiXJouQfiqJ3J9C38CdoUPCs2v9BUTr520Lp97RB32ZjlUnY5x:0+oRGQfiO5M8CdBCPv4r5TRB36j

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2068-1-0x00000000003B0000-0x00000000003EE000-memory.dmp
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections