Overview

overview

10

Static

static

10

sql.exe

windows10-2004-x64

10

sql.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    sql.log
  • Size 8.5MB
  • Sample260401-ddbjasf16l
  • SHA256 88b7f2732181a122c95c7e9d9e53b2711e8b1271517c212f17df092863eaed24
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
coffloaderdiscoveryexecutionloader

Malware Config

Targets

    • Target
      sql.log
    • Size 8.5MB
    • SHA256 88b7f2732181a122c95c7e9d9e53b2711e8b1271517c212f17df092863eaed24
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutioncoffloaderloader

    • Coffloader

      Coffloader is an open-source beacon loader written in C.

      loadercoffloader

    • Coffloader family

      coffloader

    • Detects Coffloader

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks