_ReflectiveLoader@4
Static task
static1
Behavioral task
behavioral1
Sample
1774e47878695044939263df2d589f73.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1774e47878695044939263df2d589f73.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
1774e47878695044939263df2d589f73
-
Size
204KB
-
MD5
1b9725fdae1037706cd17fdda9e86339
-
SHA1
649e1cd0d87a9c44156dd797c8c6b06cfc55a564
-
SHA256
0343fcbdc5e1581dbeec5a963f171a8b16b047dfdd7ea0f6122120250b0f068d
-
SHA512
ed7780f5ca3c35465f0fc2aa3f14a76cbda92e7f0f2e1e63f32556b2ce5b8f3ea6e7c2d00f334b31a5b30b4adf40d4d1a0dd5b4eebce19dc9a1a6da1c40de1af
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
Processes:
resource yara_rule sample cobalt_reflective_dll -
Cobaltstrike family
Files
-
1774e47878695044939263df2d589f73.dll windows x86
Exports
Exports