_ReflectiveLoader@4
Static task
static1
Behavioral task
behavioral1
Sample
605c8d4772b41602b09c3a4c98c6456a.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
605c8d4772b41602b09c3a4c98c6456a.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
605c8d4772b41602b09c3a4c98c6456a
-
Size
207KB
-
MD5
25498568f1da7b3b83cee91592fede2f
-
SHA1
44b1d99408247cce18173f5248e9104bfe78f397
-
SHA256
cc130e6cd39bf10d21956c48f083c6dd306dab8bd77a11f85fc3128c39cf9e97
-
SHA512
1f75ae179a93a73f4ec3d31ae3fae1c03fec119a55f94c3fee5862b70f995fc14115ea1484d297a3a870da58337e7317d736f4841ace41ed730099c143ddbacf
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
605c8d4772b41602b09c3a4c98c6456a.dll windows x86
Exports
Exports