Overview

overview

10

Static

static

10

1308-1-0x0...ry.dll

windows7-x64

1

1308-1-0x0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1308-1-0x0000000048C70000-0x0000000048CBF000-memory.dmp

  • Size

    316KB

  • MD5

    f27babd297e15caca43ec055fc5882f2

  • SHA1

    42d27646ad0eb12ce98b9b89556eb5790b147ea8

  • SHA256

    a790b850ad8a01a4ad924fa34577590163e9471cfcaaae3ff729424ad7a5b8c3

  • SHA512

    4794940978d607af042debf5e374d9471f2661049e1fa5474464235abca721dc8e76c12716b4a71a360fa55a9babe0d8d9d3eed0ff9df266dd6fd2a657c601cf

  • SSDEEP

    6144:uJqVG5d1IpMyibgkTZI6jHID90arapvpH/:u3d6tevoxWpvl

Score
10/10
0cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1308-1-0x0000000048C70000-0x0000000048CBF000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections