Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3CobaltStri...nal.7z
windows7-x64
3CobaltStri...nal.7z
windows10-2004-x64
3CobaltStri...nt.cmd
windows7-x64
1CobaltStri...nt.cmd
windows10-2004-x64
1CobaltStri...nt.jar
windows7-x64
1CobaltStri...nt.jar
windows10-2004-x64
1CobaltStri...ok.jar
windows7-x64
1CobaltStri...ok.jar
windows10-2004-x64
1CobaltStri...mon.sh
windows7-x64
3CobaltStri...mon.sh
windows10-2004-x64
3Analysis
-
max time kernel
967s -
max time network
972s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16/05/2023, 10:58
Static task
static1
Behavioral task
behavioral1
Sample
CobaltStrike48-pwn3rzs-cyberarsenal.7z
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CobaltStrike48-pwn3rzs-cyberarsenal.7z
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/cobaltstrike-client.cmd
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/cobaltstrike-client.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/cobaltstrike-client.jar
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/cobaltstrike-client.jar
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/uHook.jar
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/uHook.jar
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Server/source-common.sh
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Server/source-common.sh
Resource
win10v2004-20230220-en
General
-
Target
CobaltStrike48-pwn3rzs-cyberarsenal_ucare/Client/cobaltstrike-client.jar
-
Size
29.1MB
-
MD5
915a45f75fa8d9a002f316360c78bdc0
-
SHA1
c4e0c69d9a6cb152f3341fbadc189ec182fac7bc
-
SHA256
50987b54356dbfe6348f7883e90b311b66405c692b68d247770136f9846397d4
-
SHA512
7cffa22c829bb5f6b7f316384f302a87dddb3c17e5d881796151ad36408750040b16687e6af6b593f5ef56f98ef38fa6e40dbe4f0ccea2473a3cb80bd9584f2d
-
SSDEEP
786432:DCIVgTlnH2N7Rf9E7QG718wUnxiQFuHA0IgeTwIAc:7AFWN7mzJ8wUHuHf1eTgc
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4216 java.exe 4216 java.exe 4216 java.exe 4216 java.exe