Static task
static1
Behavioral task
behavioral1
Sample
9b3256082d52fa5f63f0c1502c3028124f01bf2d1244ac159ecaec2898180a7d.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
9b3256082d52fa5f63f0c1502c3028124f01bf2d1244ac159ecaec2898180a7d.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
9b3256082d52fa5f63f0c1502c3028124f01bf2d1244ac159ecaec2898180a7d
-
Size
244KB
-
MD5
93451f4312bbb46f654b985d825a4cca
-
SHA1
21e1c3cdcf86f4224fa2c0d797875c4bebb7bce4
-
SHA256
9b3256082d52fa5f63f0c1502c3028124f01bf2d1244ac159ecaec2898180a7d
-
SHA512
a122a6431aabb7f4ec72c2d09148682275d9f37f04c85c3732f4888ee8ee6a80de64ac82ddb64c1212a4c950119d18a8be4e25392e3bb32e0972d7b48b145130
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
9b3256082d52fa5f63f0c1502c3028124f01bf2d1244ac159ecaec2898180a7d.dll windows x86