Static task
static1
Behavioral task
behavioral1
Sample
608059c39c883043b95924f842608db0.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
608059c39c883043b95924f842608db0.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
Errors
Reason
config extraction: CobaltStrike: pe: invalid address
General
-
Target
608059c39c883043b95924f842608db0
-
Size
244KB
-
MD5
fb1ce75695073a0fccc15d706dd96d96
-
SHA1
690c5625842f36f15543e3b9bed60ae2e30f3eae
-
SHA256
abe565848f25f8a43ff040904c1e65c5e978583e19235272dec31b8eeb937640
-
SHA512
7a4b8a94fe158fd86302510889642cb32706c16382ff73cd82013e8701982b6b6e949d39ae0e153c4ebc99b87161d88081ce8276c1cc80b5842a9fd721cc637a
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
608059c39c883043b95924f842608db0.dll windows x86