Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
03/07/2026, 17:46
General
- Target cococlient.jar
- Size 753KB
- Sample260703-wcdldadv2z
- SHA256 36d81a84352bb1bc13c00629d820c5bce1cd97b2081bb71e83f6b0d0c37bc472
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\cococlient.jar1⤵
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_uzrdsxc3.l5q.ps1
memory/3492-2-0x000002BA00000000-0x000002BA00270000-memory.dmp
memory/3492-12-0x000002BA70350000-0x000002BA70351000-memory.dmp
memory/3492-13-0x000002BA00000000-0x000002BA00270000-memory.dmp
memory/4504-16-0x0000020B37900000-0x0000020B37910000-memory.dmp
memory/4504-17-0x0000020B37900000-0x0000020B37910000-memory.dmp
memory/4504-18-0x0000020B1DF60000-0x0000020B1DF82000-memory.dmp
memory/4504-26-0x0000020B37CA0000-0x0000020B37CE4000-memory.dmp
memory/4504-27-0x0000020B37D70000-0x0000020B37DE6000-memory.dmp
memory/4504-28-0x0000020B37900000-0x0000020B37910000-memory.dmp
memory/4504-29-0x0000020B37900000-0x0000020B37910000-memory.dmp