General

  • Target

    840-2-0x00000000007D0000-0x000000000081F000-memory.dmp

  • Size

    316KB

  • MD5

    0b5d2448a032d5a97c1b662b64b12a31

  • SHA1

    e23750645ed57fc025ef05ff4a92d15c7847662c

  • SHA256

    d576c52977597e0489e88c965a4e53a342cf5d021c9ac36b40fa109e31e3871b

  • SHA512

    e3fd7fe21f64a23f6e0146f3611df0acff6292f23f3e552e3ff2f981bd76027ad223781f9fe5a348331c93b9e93db50ce4068b6d686bab8122289a30153ac057

  • SSDEEP

    6144:uJqXG5d1Ip8yibgkTZI6jHID90aYfHVcH/:u9d6devoxMHV6

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 840-2-0x00000000007D0000-0x000000000081F000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections