Analysis
- max time kernel
148s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
18/07/2026, 03:11
General
- Target CobaltStrike4.8/Client/cobaltstrike-client.cmd
- Size 173B
- Sample260718-dpkw4set8q
- SHA256 f350ab5ca2a13db470fac76f7bfe80651a0aa577c9cf05afab301bacc9761e7c
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\CobaltStrike4.8\Client\cobaltstrike-client.cmd"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -XX:ParallelGCThreads=4 -XX:+AggressiveHeap -XX:+UseParallelGC -javaagent:uHook.jar -jar cobaltstrike-client.jar $*2⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4432-2-0x000001E826460000-0x000001E8266D0000-memory.dmp
memory/4432-11-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-15-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-17-0x000001E8266D0000-0x000001E8266E0000-memory.dmp
memory/4432-20-0x000001E8266E0000-0x000001E8266F0000-memory.dmp
memory/4432-22-0x000001E8266F0000-0x000001E826700000-memory.dmp
memory/4432-23-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-25-0x000001E826700000-0x000001E826710000-memory.dmp
memory/4432-27-0x000001E826710000-0x000001E826720000-memory.dmp
memory/4432-29-0x000001E826720000-0x000001E826730000-memory.dmp
memory/4432-31-0x000001E826730000-0x000001E826740000-memory.dmp
memory/4432-33-0x000001E826460000-0x000001E8266D0000-memory.dmp
memory/4432-34-0x000001E826740000-0x000001E826750000-memory.dmp
memory/4432-36-0x000001E826750000-0x000001E826760000-memory.dmp
memory/4432-39-0x000001E826760000-0x000001E826770000-memory.dmp
memory/4432-45-0x000001E826770000-0x000001E826780000-memory.dmp
memory/4432-51-0x000001E8266F0000-0x000001E826700000-memory.dmp
memory/4432-46-0x000001E826780000-0x000001E826790000-memory.dmp
memory/4432-54-0x000001E8267C0000-0x000001E8267D0000-memory.dmp
memory/4432-53-0x000001E826700000-0x000001E826710000-memory.dmp
memory/4432-50-0x000001E8267B0000-0x000001E8267C0000-memory.dmp
memory/4432-49-0x000001E8267A0000-0x000001E8267B0000-memory.dmp
memory/4432-58-0x000001E8267D0000-0x000001E8267E0000-memory.dmp
memory/4432-57-0x000001E826710000-0x000001E826720000-memory.dmp
memory/4432-48-0x000001E8266E0000-0x000001E8266F0000-memory.dmp
memory/4432-47-0x000001E826790000-0x000001E8267A0000-memory.dmp
memory/4432-43-0x000001E8266D0000-0x000001E8266E0000-memory.dmp
memory/4432-61-0x000001E8267E0000-0x000001E8267F0000-memory.dmp
memory/4432-60-0x000001E826720000-0x000001E826730000-memory.dmp
memory/4432-64-0x000001E8267F0000-0x000001E826800000-memory.dmp
memory/4432-63-0x000001E826730000-0x000001E826740000-memory.dmp
memory/4432-66-0x000001E826740000-0x000001E826750000-memory.dmp
memory/4432-67-0x000001E826800000-0x000001E826810000-memory.dmp
memory/4432-72-0x000001E826810000-0x000001E826820000-memory.dmp
memory/4432-71-0x000001E826750000-0x000001E826760000-memory.dmp
memory/4432-70-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-75-0x000001E826770000-0x000001E826780000-memory.dmp
memory/4432-76-0x000001E826820000-0x000001E826830000-memory.dmp
memory/4432-74-0x000001E826760000-0x000001E826770000-memory.dmp
memory/4432-80-0x000001E826830000-0x000001E826840000-memory.dmp
memory/4432-79-0x000001E826790000-0x000001E8267A0000-memory.dmp
memory/4432-78-0x000001E826780000-0x000001E826790000-memory.dmp
memory/4432-85-0x000001E8267A0000-0x000001E8267B0000-memory.dmp
memory/4432-86-0x000001E826840000-0x000001E826850000-memory.dmp
memory/4432-88-0x000001E8267B0000-0x000001E8267C0000-memory.dmp
memory/4432-89-0x000001E826850000-0x000001E826860000-memory.dmp
memory/4432-92-0x000001E826860000-0x000001E826870000-memory.dmp
memory/4432-91-0x000001E8267C0000-0x000001E8267D0000-memory.dmp
memory/4432-93-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-95-0x000001E8267D0000-0x000001E8267E0000-memory.dmp
memory/4432-96-0x000001E826870000-0x000001E826880000-memory.dmp
memory/4432-100-0x000001E826880000-0x000001E826890000-memory.dmp
memory/4432-102-0x000001E8267F0000-0x000001E826800000-memory.dmp
memory/4432-101-0x000001E826890000-0x000001E8268A0000-memory.dmp
memory/4432-99-0x000001E8267E0000-0x000001E8267F0000-memory.dmp
memory/4432-104-0x000001E826800000-0x000001E826810000-memory.dmp
memory/4432-105-0x000001E8268A0000-0x000001E8268B0000-memory.dmp
memory/4432-107-0x000001E826810000-0x000001E826820000-memory.dmp
memory/4432-108-0x000001E8268B0000-0x000001E8268C0000-memory.dmp
memory/4432-120-0x000001E826840000-0x000001E826850000-memory.dmp
memory/4432-119-0x000001E8268F0000-0x000001E826900000-memory.dmp
memory/4432-115-0x000001E8268D0000-0x000001E8268E0000-memory.dmp
memory/4432-126-0x000001E826860000-0x000001E826870000-memory.dmp
memory/4432-125-0x000001E826910000-0x000001E826920000-memory.dmp
memory/4432-124-0x000001E826900000-0x000001E826910000-memory.dmp
memory/4432-123-0x000001E826850000-0x000001E826860000-memory.dmp
memory/4432-114-0x000001E8268C0000-0x000001E8268D0000-memory.dmp
memory/4432-113-0x000001E826820000-0x000001E826830000-memory.dmp
memory/4432-117-0x000001E826830000-0x000001E826840000-memory.dmp
memory/4432-116-0x000001E8268E0000-0x000001E8268F0000-memory.dmp
memory/4432-134-0x000001E826930000-0x000001E826940000-memory.dmp
memory/4432-136-0x000001E826950000-0x000001E826960000-memory.dmp
memory/4432-139-0x000001E826890000-0x000001E8268A0000-memory.dmp
memory/4432-141-0x000001E826970000-0x000001E826980000-memory.dmp
memory/4432-135-0x000001E826940000-0x000001E826950000-memory.dmp
memory/4432-133-0x000001E826920000-0x000001E826930000-memory.dmp
memory/4432-132-0x000001E826960000-0x000001E826970000-memory.dmp
memory/4432-131-0x000001E826870000-0x000001E826880000-memory.dmp
memory/4432-138-0x000001E826880000-0x000001E826890000-memory.dmp
memory/4432-143-0x000001E8268A0000-0x000001E8268B0000-memory.dmp
memory/4432-144-0x000001E826980000-0x000001E826990000-memory.dmp
memory/4432-147-0x000001E826990000-0x000001E8269A0000-memory.dmp
memory/4432-151-0x000001E8269A0000-0x000001E8269B0000-memory.dmp
memory/4432-150-0x000001E8268E0000-0x000001E8268F0000-memory.dmp
memory/4432-149-0x000001E8268D0000-0x000001E8268E0000-memory.dmp
memory/4432-148-0x000001E8268C0000-0x000001E8268D0000-memory.dmp
memory/4432-146-0x000001E8268B0000-0x000001E8268C0000-memory.dmp
memory/4432-153-0x000001E8269B0000-0x000001E8269C0000-memory.dmp
memory/4432-155-0x000001E8268F0000-0x000001E826900000-memory.dmp
memory/4432-156-0x000001E8269C0000-0x000001E8269D0000-memory.dmp
memory/4432-161-0x000001E826910000-0x000001E826920000-memory.dmp
memory/4432-162-0x000001E8269D0000-0x000001E8269E0000-memory.dmp
memory/4432-160-0x000001E826900000-0x000001E826910000-memory.dmp
memory/4432-167-0x000001E8269E0000-0x000001E8269F0000-memory.dmp
memory/4432-172-0x000001E826920000-0x000001E826930000-memory.dmp
memory/4432-175-0x000001E8269F0000-0x000001E826A00000-memory.dmp
memory/4432-174-0x000001E826940000-0x000001E826950000-memory.dmp
memory/4432-173-0x000001E826930000-0x000001E826940000-memory.dmp
memory/4432-171-0x000001E826960000-0x000001E826970000-memory.dmp
memory/4432-177-0x000001E826A00000-0x000001E826A10000-memory.dmp
memory/4432-179-0x000001E826970000-0x000001E826980000-memory.dmp
memory/4432-225-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-245-0x000001E824B00000-0x000001E824B01000-memory.dmp
memory/4432-258-0x000001E824B00000-0x000001E824B01000-memory.dmp