Static task
static1
Behavioral task
behavioral1
Sample
a32821288e4c9ec67ad293f67135d868db184fb8063f0febcceca8d76e198095.dll
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a32821288e4c9ec67ad293f67135d868db184fb8063f0febcceca8d76e198095.dll
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
a32821288e4c9ec67ad293f67135d868db184fb8063f0febcceca8d76e198095
-
Size
244KB
-
MD5
ef7cb9b6a3e813fffe9ce5eaf18ca10f
-
SHA1
a3397580a3de6ea2235ac52909832816be701921
-
SHA256
a32821288e4c9ec67ad293f67135d868db184fb8063f0febcceca8d76e198095
-
SHA512
3f9db572a97a1b7c00b3bcb463854e2a27b09cd29b9ff9dc2f2462809f57d4a84dc5b8e031f394b21707b8493558589ee506c80813e67aa182ae9eae60882587
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
a32821288e4c9ec67ad293f67135d868db184fb8063f0febcceca8d76e198095.dll windows x86