General
-
Target
2084-0-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
MD5
11ed2e4c5b55443a8e4b3b8ecf057793
-
SHA1
a4fea6ac14cd2bb1229c77a075ff429b9fa28967
-
SHA256
fa61cda0aa155d790518683d2e8866462e32ead12f34af9002776c981b3ba9a1
-
SHA512
0e890035e596b7f1bc60950ef670dd917011c76e104ec23481a34629c5312b4e28f3a394b0ecb009e36e568b145ef16b4ccf6f63f5d6220cb24c1b6d8f6b57c7
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://106.15.67.102:80/YJCw
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2)
Signatures
-
Cobaltstrike family
Files
-
2084-0-0x0000000000020000-0x0000000000021000-memory.dmp