General

  • Target

    2084-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    11ed2e4c5b55443a8e4b3b8ecf057793

  • SHA1

    a4fea6ac14cd2bb1229c77a075ff429b9fa28967

  • SHA256

    fa61cda0aa155d790518683d2e8866462e32ead12f34af9002776c981b3ba9a1

  • SHA512

    0e890035e596b7f1bc60950ef670dd917011c76e104ec23481a34629c5312b4e28f3a394b0ecb009e36e568b145ef16b4ccf6f63f5d6220cb24c1b6d8f6b57c7

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://106.15.67.102:80/YJCw

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2)

Signatures

Files

  • 2084-0-0x0000000000020000-0x0000000000021000-memory.dmp