MalwareBazaar Database

This page shows some basic information the YARA rule troj_win_cobaltstrike_memoryinject including corresponding malware samples.

Database Entry

YARA Rule:troj_win_cobaltstrike_memoryinject
Create hunting rule
Author:Jeff White (karttoon@gmail.com) @noottrak
Description:Detects Cobalt Strike payload typically loaded into memory via PowerShell.
Firstseen:2022-06-19 08:29:53 UTC
Lastseen:2025-11-23 09:31:16 UTC
Sightings:303

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter