Analysis
- max time kernel
148s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
18/07/2026, 03:11
General
- Target CobaltStrike4.8/Client/cobaltstrike-client.jar
- Size 29.1MB
- Sample260718-dpkw4set8q
- SHA256 50987b54356dbfe6348f7883e90b311b66405c692b68d247770136f9846397d4
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\CobaltStrike4.8\Client\cobaltstrike-client.jar1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4656-2-0x000001FC50D30000-0x000001FC50FA0000-memory.dmp
memory/4656-14-0x000001FC4F4E0000-0x000001FC4F4E1000-memory.dmp
memory/4656-16-0x000001FC4F4E0000-0x000001FC4F4E1000-memory.dmp
memory/4656-20-0x000001FC50FA0000-0x000001FC50FB0000-memory.dmp
memory/4656-21-0x000001FC50FB0000-0x000001FC50FC0000-memory.dmp
memory/4656-23-0x000001FC50FC0000-0x000001FC50FD0000-memory.dmp
memory/4656-26-0x000001FC50FD0000-0x000001FC50FE0000-memory.dmp
memory/4656-28-0x000001FC50FE0000-0x000001FC50FF0000-memory.dmp
memory/4656-30-0x000001FC50FF0000-0x000001FC51000000-memory.dmp
memory/4656-32-0x000001FC51000000-0x000001FC51010000-memory.dmp
memory/4656-35-0x000001FC51010000-0x000001FC51020000-memory.dmp
memory/4656-38-0x000001FC51020000-0x000001FC51030000-memory.dmp
memory/4656-37-0x000001FC50D30000-0x000001FC50FA0000-memory.dmp
memory/4656-41-0x000001FC50FA0000-0x000001FC50FB0000-memory.dmp
memory/4656-42-0x000001FC51030000-0x000001FC51040000-memory.dmp
memory/4656-46-0x000001FC51040000-0x000001FC51050000-memory.dmp
memory/4656-49-0x000001FC51050000-0x000001FC51060000-memory.dmp
memory/4656-48-0x000001FC50FB0000-0x000001FC50FC0000-memory.dmp
memory/4656-57-0x000001FC51080000-0x000001FC51090000-memory.dmp
memory/4656-56-0x000001FC50FD0000-0x000001FC50FE0000-memory.dmp
memory/4656-55-0x000001FC51070000-0x000001FC51080000-memory.dmp
memory/4656-54-0x000001FC51060000-0x000001FC51070000-memory.dmp
memory/4656-53-0x000001FC50FC0000-0x000001FC50FD0000-memory.dmp
memory/4656-60-0x000001FC50FF0000-0x000001FC51000000-memory.dmp
memory/4656-59-0x000001FC50FE0000-0x000001FC50FF0000-memory.dmp
memory/4656-61-0x000001FC51090000-0x000001FC510A0000-memory.dmp
memory/4656-69-0x000001FC510C0000-0x000001FC510D0000-memory.dmp
memory/4656-66-0x000001FC510B0000-0x000001FC510C0000-memory.dmp
memory/4656-80-0x000001FC51100000-0x000001FC51110000-memory.dmp
memory/4656-82-0x000001FC51030000-0x000001FC51040000-memory.dmp
memory/4656-81-0x000001FC51120000-0x000001FC51130000-memory.dmp
memory/4656-79-0x000001FC510F0000-0x000001FC51100000-memory.dmp
memory/4656-78-0x000001FC510E0000-0x000001FC510F0000-memory.dmp
memory/4656-77-0x000001FC510D0000-0x000001FC510E0000-memory.dmp
memory/4656-76-0x000001FC51020000-0x000001FC51030000-memory.dmp
memory/4656-65-0x000001FC510A0000-0x000001FC510B0000-memory.dmp
memory/4656-70-0x000001FC51010000-0x000001FC51020000-memory.dmp
memory/4656-67-0x000001FC51000000-0x000001FC51010000-memory.dmp
memory/4656-86-0x000001FC51130000-0x000001FC51140000-memory.dmp
memory/4656-93-0x000001FC51150000-0x000001FC51160000-memory.dmp
memory/4656-91-0x000001FC51060000-0x000001FC51070000-memory.dmp
memory/4656-103-0x000001FC51180000-0x000001FC51190000-memory.dmp
memory/4656-102-0x000001FC510B0000-0x000001FC510C0000-memory.dmp
memory/4656-101-0x000001FC510A0000-0x000001FC510B0000-memory.dmp
memory/4656-100-0x000001FC51090000-0x000001FC510A0000-memory.dmp
memory/4656-99-0x000001FC51170000-0x000001FC51180000-memory.dmp
memory/4656-98-0x000001FC51160000-0x000001FC51170000-memory.dmp
memory/4656-97-0x000001FC51080000-0x000001FC51090000-memory.dmp
memory/4656-88-0x000001FC51110000-0x000001FC51120000-memory.dmp
memory/4656-92-0x000001FC51070000-0x000001FC51080000-memory.dmp
memory/4656-90-0x000001FC51140000-0x000001FC51150000-memory.dmp
memory/4656-85-0x000001FC51040000-0x000001FC51050000-memory.dmp
memory/4656-89-0x000001FC51050000-0x000001FC51060000-memory.dmp
memory/4656-104-0x000001FC4F4E0000-0x000001FC4F4E1000-memory.dmp
memory/4656-107-0x000001FC51190000-0x000001FC511A0000-memory.dmp
memory/4656-110-0x000001FC510C0000-0x000001FC510D0000-memory.dmp
memory/4656-112-0x000001FC511A0000-0x000001FC511B0000-memory.dmp
memory/4656-111-0x000001FC51120000-0x000001FC51130000-memory.dmp
memory/4656-115-0x000001FC4F4E0000-0x000001FC4F4E1000-memory.dmp
memory/4656-119-0x000001FC51100000-0x000001FC51110000-memory.dmp
memory/4656-118-0x000001FC510F0000-0x000001FC51100000-memory.dmp
memory/4656-117-0x000001FC510E0000-0x000001FC510F0000-memory.dmp
memory/4656-116-0x000001FC510D0000-0x000001FC510E0000-memory.dmp
memory/4656-120-0x000001FC511B0000-0x000001FC511C0000-memory.dmp
memory/4656-125-0x000001FC511C0000-0x000001FC511D0000-memory.dmp
memory/4656-124-0x000001FC51130000-0x000001FC51140000-memory.dmp
memory/4656-130-0x000001FC51140000-0x000001FC51150000-memory.dmp
memory/4656-133-0x000001FC511D0000-0x000001FC511E0000-memory.dmp
memory/4656-134-0x000001FC51150000-0x000001FC51160000-memory.dmp
memory/4656-135-0x000001FC51160000-0x000001FC51170000-memory.dmp
memory/4656-136-0x000001FC51170000-0x000001FC51180000-memory.dmp
memory/4656-137-0x000001FC51180000-0x000001FC51190000-memory.dmp
memory/4656-138-0x000001FC51190000-0x000001FC511A0000-memory.dmp
memory/4656-139-0x000001FC511A0000-0x000001FC511B0000-memory.dmp
memory/4656-140-0x000001FC511B0000-0x000001FC511C0000-memory.dmp
memory/4656-141-0x000001FC511C0000-0x000001FC511D0000-memory.dmp
memory/4656-142-0x000001FC511D0000-0x000001FC511E0000-memory.dmp