Static task
static1
Behavioral task
behavioral1
Sample
5ccacffeab30b1996801fc201a750cc7d82d642363d0201cb04ec6b5235621d0.dll
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5ccacffeab30b1996801fc201a750cc7d82d642363d0201cb04ec6b5235621d0.dll
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
5ccacffeab30b1996801fc201a750cc7d82d642363d0201cb04ec6b5235621d0
-
Size
244KB
-
MD5
c4ebf2441989e96ae9d03fc236afe324
-
SHA1
4547c851af4b09ccadbd218398bca4941a69e3bb
-
SHA256
5ccacffeab30b1996801fc201a750cc7d82d642363d0201cb04ec6b5235621d0
-
SHA512
7cc49b6a0500d8bfc6b94cb2119c58e3e0316e5ed2e2f734507122f49494aa5659d39ce61f5dc99bed245bbee2ab29944bfbf7f9d057a790efe85ab810787719
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
5ccacffeab30b1996801fc201a750cc7d82d642363d0201cb04ec6b5235621d0.dll windows x86