Overview
overview
4Static
static
3CobaltStri...ked.7z
windows10-2004-x64
1CobaltStri...ked.7z
windows11-ltsc_2024-x64
1CobaltStri...nt.cmd
windows10-2004-x64
3CobaltStri...nt.cmd
windows11-ltsc_2024-x64
3CobaltStri...nt.jar
windows10-2004-x64
1CobaltStri...nt.jar
windows11-ltsc_2024-x64
1CobaltStri...e.auth
windows10-2004-x64
3CobaltStri...e.auth
windows11-ltsc_2024-x64
3CobaltStri...ok.jar
windows10-2004-x64
1CobaltStri...ok.jar
windows11-ltsc_2024-x64
1CobaltStri..._store
windows10-2004-x64
3CobaltStri..._store
windows11-ltsc_2024-x64
3CobaltStri...rImage
ubuntu-18.04-amd64
4CobaltStri...e.auth
windows10-2004-x64
3CobaltStri...e.auth
windows11-ltsc_2024-x64
3CobaltStri...mon.sh
windows10-2004-x64
3CobaltStri...mon.sh
windows11-ltsc_2024-x64
3CobaltStri...server
ubuntu-18.04-amd64
1CobaltStri...server
debian-9-armhf
1CobaltStri...server
debian-9-mips
CobaltStri...server
debian-9-mipsel
CobaltStri...nc.txt
windows10-2004-x64
1CobaltStri...nc.txt
windows11-ltsc_2024-x64
1CobaltStri...64.dll
windows10-2004-x64
1CobaltStri...64.dll
windows11-ltsc_2024-x64
1CobaltStri...86.dll
windows10-2004-x64
3CobaltStri...86.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/07/2026, 03:11
Static task
static1
Behavioral task
behavioral1
Sample
CobaltStrike.4.8.Cracked.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
CobaltStrike.4.8.Cracked.7z
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
CobaltStrike4.8/Client/cobaltstrike-client.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
CobaltStrike4.8/Client/cobaltstrike-client.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
CobaltStrike4.8/Client/cobaltstrike-client.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
CobaltStrike4.8/Client/cobaltstrike-client.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
CobaltStrike4.8/Client/cobaltstrike.auth
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
CobaltStrike4.8/Client/cobaltstrike.auth
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
CobaltStrike4.8/Client/uHook.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
CobaltStrike4.8/Client/uHook.jar
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
CobaltStrike4.8/Server/.ds_store
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
CobaltStrike4.8/Server/.ds_store
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
CobaltStrike4.8/Server/TeamServerImage
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral14
Sample
CobaltStrike4.8/Server/cobaltstrike.auth
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
CobaltStrike4.8/Server/cobaltstrike.auth
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
CobaltStrike4.8/Server/source-common.sh
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
CobaltStrike4.8/Server/source-common.sh
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
CobaltStrike4.8/Server/teamserver
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral19
Sample
CobaltStrike4.8/Server/teamserver
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral20
Sample
CobaltStrike4.8/Server/teamserver
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral21
Sample
CobaltStrike4.8/Server/teamserver
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral22
Sample
CobaltStrike4.8/Server/third-party/README.winvnc.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
CobaltStrike4.8/Server/third-party/README.winvnc.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
CobaltStrike4.8/Server/third-party/winvnc.x64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
CobaltStrike4.8/Server/third-party/winvnc.x64.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
CobaltStrike4.8/Server/third-party/winvnc.x86.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
CobaltStrike4.8/Server/third-party/winvnc.x86.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target CobaltStrike.4.8.Cracked.7z
- Size 61.6MB
- Sample260718-dpkw4set8q
- SHA256 631b466c3a9e35983fa0ef9eb9d592c8b9da18ccc267d28c91f5587736203e69
- MD5 492a290753d2dcf92232b2d637a4e701
- SHA1 cc9e831c4144a3af34cb6e947d723bb722843fc5
- SHA512 ce7264a1c4d25f000fef1449c3f65bbeb0f4745fbd0ae29eac72c644bf2bed277b967f2f02a3d984405aaea2eba1e9e2ec20f0e388340c66784e27d445846e10
- SSDEEP 1572864:KHVg4tFuimnBS7o3OCFfRGNE0sZysFu9F2r:KHBu+o3O9FsZ49FC
- TLSH T1FEE7331A09F17316EA0ECE34FB42A6A22141B3365DA57B05D3DCC28CBA86CD356DE5D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1120 7zFM.exe Token: 35 1120 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1120 7zFM.exe