Live Stream VOD: Basic Malware Downloader Triage and Detection (Patreon)

In this twitch stream we triage two simple malware downloaders and look for common characteristics that we can use to automatically detect them. One loader turns out to be a Cobalt Strike loader and we attempt to extend our detections...

Downloader #1

9211ebf25c3cd3641451c95c50c1d3b7b2a4c53c36fa36564f3c1a177a0cda3d

Downloader #2 (Cobalt Strike)

1a10e2940151982f2ab4f1e62be6e4f53074a2ffb90c7977e16d6a183db98695

Notes (including Yara rules)

Malware Downloader Triage Notes