Overview

overview

10

Static

static

10

blobrunner...in.dll

windows7_x64

10

blobrunner...in.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    blobrunner_03600000_stripped.bin

  • Size

    4.0MB

  • Sample

    201202-578nnkasq6

  • MD5

    cd132f454eb5fcdf1fe75541ac864d14

  • SHA1

    a2d9ae828b3dd7986d4537266f0e7d9a6a19a533

  • SHA256

    2dc66a39b022a2c750a9ae839b2f8d9681e34315b31c560381e05a1913a7851c

  • SHA512

    5261f0e52dab79046bdc2159cfd2b4aab27c3284901bacd2e677542a8f8aef4f13ab6084850ea56ad05058d2b6b361292d1d17aab8f3483ab6411a9bad2d0d9f

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      blobrunner_03600000_stripped.bin

    • Size

      4.0MB

    • MD5

      cd132f454eb5fcdf1fe75541ac864d14

    • SHA1

      a2d9ae828b3dd7986d4537266f0e7d9a6a19a533

    • SHA256

      2dc66a39b022a2c750a9ae839b2f8d9681e34315b31c560381e05a1913a7851c

    • SHA512

      5261f0e52dab79046bdc2159cfd2b4aab27c3284901bacd2e677542a8f8aef4f13ab6084850ea56ad05058d2b6b361292d1d17aab8f3483ab6411a9bad2d0d9f

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks