cobaltstrike | blobrunner_03600000_stripped[.]bin | Triage

Sharing

Reason

config extraction: CobaltStrike: cobaltstrike: $reflective_dll not found

General

Target

blobrunner_03600000_stripped.bin
Size

4.0MB
MD5

cd132f454eb5fcdf1fe75541ac864d14
SHA1

a2d9ae828b3dd7986d4537266f0e7d9a6a19a533
SHA256

2dc66a39b022a2c750a9ae839b2f8d9681e34315b31c560381e05a1913a7851c
SHA512

5261f0e52dab79046bdc2159cfd2b4aab27c3284901bacd2e677542a8f8aef4f13ab6084850ea56ad05058d2b6b361292d1d17aab8f3483ab6411a9bad2d0d9f

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobalt Strike reflective loader 1 IoCs

Detects the reflective loader used by Cobalt Strike.

Processes:

resource	yara_rule
sample	cobalt_reflective_dll

Cobaltstrike family
cobaltstrike

Files

blobrunner_03600000_stripped.bin
.dll windows x86

Exports

Exports

_ReflectiveLoader@4