_ReflectiveLoader@4
Static task
static1
Behavioral task
behavioral1
Sample
a4ae67c76f52db57703b9430563359ac65497f5e7197f3cd992d11ef225cd057.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a4ae67c76f52db57703b9430563359ac65497f5e7197f3cd992d11ef225cd057.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
a4ae67c76f52db57703b9430563359ac65497f5e7197f3cd992d11ef225cd057
-
Size
192KB
-
MD5
db7d51898a038b7b9133f29d2a46cf59
-
SHA1
e4668b3fdecdf2c6224d5520e32f7b979aa46dc2
-
SHA256
a4ae67c76f52db57703b9430563359ac65497f5e7197f3cd992d11ef225cd057
-
SHA512
ac112c04232efff6419117be04250b08c389ca9659ce5e33755b00690c439fc9f0864b578de3dafa0680be0bc89423fa7ba50dfd0736b1c8a79a880fb5836295
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
a4ae67c76f52db57703b9430563359ac65497f5e7197f3cd992d11ef225cd057.dll windows x86
Exports
Exports