General
-
Target
840-0-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
MD5
f5f28aa5d687574ddbd3bbeded8d4e31
-
SHA1
7576260b1dff6c1047008e6bb937c2b867fce020
-
SHA256
fbe52142fb6594ef9d080a5b3f635dab34c3195060b29fd827959a2900978fa8
-
SHA512
b9b33dc70a758ddda39502c68b0e4c7ae7d6d32b86b6e3aab7eb56c02c2c90e035e993ad9d05b9860aab6121284aca11b06fafff9d8f5df2221aaed63ddcb0e1
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://156.224.21.148:80/GclG
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0)
Signatures
-
Cobaltstrike family
Files
-
840-0-0x0000000000020000-0x0000000000021000-memory.dmp