General

  • Target

    840-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    f5f28aa5d687574ddbd3bbeded8d4e31

  • SHA1

    7576260b1dff6c1047008e6bb937c2b867fce020

  • SHA256

    fbe52142fb6594ef9d080a5b3f635dab34c3195060b29fd827959a2900978fa8

  • SHA512

    b9b33dc70a758ddda39502c68b0e4c7ae7d6d32b86b6e3aab7eb56c02c2c90e035e993ad9d05b9860aab6121284aca11b06fafff9d8f5df2221aaed63ddcb0e1

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://156.224.21.148:80/GclG

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0)

Signatures

Files

  • 840-0-0x0000000000020000-0x0000000000021000-memory.dmp