MalwareBazaar Database
This page shows some basic information the YARA rule HKTL_CobaltStrike_SleepMask_Jul22 including corresponding malware samples.
Database Entry
| YARA Rule: | HKTL_CobaltStrike_SleepMask_Jul22 |
|---|---|
| Author: | CodeX |
| Description: | Detects static bytes in Cobalt Strike 4.5 sleep mask function that are not obfuscated |
| Firstseen: | 2022-08-23 16:10:38 UTC |
| Lastseen: | 2025-09-23 15:30:06 UTC |
| Sightings: | 239 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|