_ReflectiveLoader@4
Static task
static1
Behavioral task
behavioral1
Sample
46f46ade0fd2e8441d58fc443e158412.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
46f46ade0fd2e8441d58fc443e158412.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
46f46ade0fd2e8441d58fc443e158412
-
Size
199KB
-
MD5
d854021f9aff7c142c26edaffdbdf825
-
SHA1
7a548811302f4c82e957c37f0116a2a10e2213d9
-
SHA256
6c3948e45a735227adf165e782b7ddfccf4b2547f44b08c5e5f9ee443f348cf2
-
SHA512
0f1a5f8ede3530549a88f4d51fd7ab896f7ee793b192e3494e3f66fe879022aae15ad31310e69d9f5ce36d89823bf4674e0e59f9e7a2cc8606703a242c9ac58f
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
46f46ade0fd2e8441d58fc443e158412.dll windows x86
Exports
Exports