_ReflectiveLoader@4
Static task
static1
Behavioral task
behavioral1
Sample
958483daa785f416869f8bb77b8b3168.dll
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
958483daa785f416869f8bb77b8b3168.dll
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
958483daa785f416869f8bb77b8b3168
-
Size
204KB
-
MD5
0d39ffeef0a201f67a32015fa715a828
-
SHA1
97630df6406238b3450ca244e23eb1fa34daf3ca
-
SHA256
4f509c612841349936856c59afbaf021d5c79a7e24f93b91ca5a72d796db2a99
-
SHA512
6ccc49e4f20df985131acd0c934230af9695ff487da0a9667e3b7b0f28d17f40058ae7a14034ef38d42b041a1e0078f02d5e6df34ed3b34af23dfe60d0a34e42
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
958483daa785f416869f8bb77b8b3168.dll windows x86
Exports
Exports