Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 01:54
General
- Target 2026-09-08_ed40a834aa5c7a2db54a756eed7ba697_byakugan_cobalt-strike_coinminer_glassworm_http-browser_.exe
- Size 97.5MB
- Sample260910-cbwk1see92
- SHA256 599e21567db9ccfa7931a1851cbaa7a33169350d110b3f68d3d913e139e44f28
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 15 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-08_ed40a834aa5c7a2db54a756eed7ba697_byakugan_cobalt-strike_coinminer_glassworm_http-browser_.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-08_ed40a834aa5c7a2db54a756eed7ba697_byakugan_cobalt-strike_coinminer_glassworm_http-browser_.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\OutboundLauncher\jdk8u482-b08-jre\bin\javaw.exeC:\Users\Admin\AppData\Local\OutboundLauncher\jdk8u482-b08-jre\bin\javaw.exe -jar C:\Users\Admin\AppData\Local\OutboundLauncher\Minesweep.jar2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
Minesweep.jar
awt.dll
fontmanager.dll
freetype.dll
java.dll
javaw.exe
msvcp140.dll
net.dll
nio.dll
jvm.dll
sunec.dll
sunmscapi.dll
vcruntime140.dll
vcruntime140_1.dll
verify.dll
zip.dll
accessibility.properties
jvm.cfg
charsets.jar
currency.data
cldrdata.jar
localedata.jar
meta-index
sunec.jar
sunjce_provider.jar
sunmscapi.jar
fontconfig.bfc
win32_CopyNoDrop32x32.gif
jce.jar
jfr.jar
jsse.jar
logging.properties
meta-index
net.properties
resources.jar
cacerts
java.security
US_export_policy.jar
local_policy.jar
tzdb.dat
tzmappings
jna8440940268609542182.dll
memory/5572-665-0x0000018F36410000-0x0000018F36420000-memory.dmp
memory/5572-671-0x0000018F36430000-0x0000018F36440000-memory.dmp
memory/5572-605-0x0000018F36320000-0x0000018F36330000-memory.dmp
memory/5572-604-0x0000018F36280000-0x0000018F36290000-memory.dmp
memory/5572-608-0x0000018F36330000-0x0000018F36340000-memory.dmp
memory/5572-607-0x0000018F36290000-0x0000018F362A0000-memory.dmp
memory/5572-611-0x0000018F36340000-0x0000018F36350000-memory.dmp
memory/5572-610-0x0000018F362A0000-0x0000018F362B0000-memory.dmp
memory/5572-613-0x0000018F362B0000-0x0000018F362C0000-memory.dmp
memory/5572-614-0x0000018F36350000-0x0000018F36360000-memory.dmp
memory/5572-617-0x0000018F36360000-0x0000018F36370000-memory.dmp
memory/5572-616-0x0000018F362C0000-0x0000018F362D0000-memory.dmp
memory/5572-581-0x0000018F36290000-0x0000018F362A0000-memory.dmp
memory/5572-577-0x0000018F36280000-0x0000018F36290000-memory.dmp
memory/5572-627-0x0000018F36370000-0x0000018F36380000-memory.dmp
memory/5572-630-0x0000018F36380000-0x0000018F36390000-memory.dmp
memory/5572-668-0x0000018F36420000-0x0000018F36430000-memory.dmp
memory/5572-629-0x0000018F362E0000-0x0000018F362F0000-memory.dmp
memory/5572-626-0x0000018F362D0000-0x0000018F362E0000-memory.dmp
memory/5572-635-0x0000018F36390000-0x0000018F363A0000-memory.dmp
memory/5572-634-0x0000018F362F0000-0x0000018F36300000-memory.dmp
memory/5572-638-0x0000018F363A0000-0x0000018F363B0000-memory.dmp
memory/5572-637-0x0000018F36300000-0x0000018F36310000-memory.dmp
memory/5572-596-0x0000018F36010000-0x0000018F36280000-memory.dmp
memory/5572-670-0x0000018F36390000-0x0000018F363A0000-memory.dmp
memory/5572-645-0x0000018F36310000-0x0000018F36320000-memory.dmp
memory/5572-649-0x0000018F363C0000-0x0000018F363D0000-memory.dmp
memory/5572-648-0x0000018F36320000-0x0000018F36330000-memory.dmp
memory/5572-653-0x0000018F363D0000-0x0000018F363E0000-memory.dmp
memory/5572-652-0x0000018F36330000-0x0000018F36340000-memory.dmp
memory/5572-655-0x0000018F36340000-0x0000018F36350000-memory.dmp
memory/5572-657-0x0000018F363E0000-0x0000018F363F0000-memory.dmp
memory/5572-658-0x0000018F36350000-0x0000018F36360000-memory.dmp
memory/5572-662-0x0000018F36400000-0x0000018F36410000-memory.dmp
memory/5572-659-0x0000018F363F0000-0x0000018F36400000-memory.dmp
memory/5572-661-0x0000018F36360000-0x0000018F36370000-memory.dmp
memory/5572-598-0x0000018F362F0000-0x0000018F36300000-memory.dmp
memory/5572-664-0x0000018F36370000-0x0000018F36380000-memory.dmp
memory/5572-600-0x0000018F36300000-0x0000018F36310000-memory.dmp
memory/5572-602-0x0000018F36310000-0x0000018F36320000-memory.dmp
memory/5572-646-0x0000018F363B0000-0x0000018F363C0000-memory.dmp
memory/5572-667-0x0000018F36380000-0x0000018F36390000-memory.dmp
memory/5572-673-0x0000018F363A0000-0x0000018F363B0000-memory.dmp
memory/5572-674-0x0000018F36440000-0x0000018F36450000-memory.dmp
memory/5572-676-0x0000018F363B0000-0x0000018F363C0000-memory.dmp
memory/5572-677-0x0000018F36450000-0x0000018F36460000-memory.dmp
memory/5572-678-0x0000018F346F0000-0x0000018F346F1000-memory.dmp
memory/5572-597-0x0000018F362E0000-0x0000018F362F0000-memory.dmp
memory/5572-594-0x0000018F362D0000-0x0000018F362E0000-memory.dmp
memory/5572-591-0x0000018F362C0000-0x0000018F362D0000-memory.dmp
memory/5572-589-0x0000018F362B0000-0x0000018F362C0000-memory.dmp
memory/5572-686-0x0000018F36460000-0x0000018F36470000-memory.dmp
memory/5572-685-0x0000018F363C0000-0x0000018F363D0000-memory.dmp
memory/5572-690-0x0000018F363D0000-0x0000018F363E0000-memory.dmp
memory/5572-691-0x0000018F36470000-0x0000018F36480000-memory.dmp
memory/5572-698-0x0000018F36480000-0x0000018F36490000-memory.dmp
memory/5572-697-0x0000018F363E0000-0x0000018F363F0000-memory.dmp
memory/5572-700-0x0000018F363F0000-0x0000018F36400000-memory.dmp
memory/5572-701-0x0000018F36490000-0x0000018F364A0000-memory.dmp
memory/5572-562-0x0000018F346F0000-0x0000018F346F1000-memory.dmp
memory/5572-715-0x0000018F364B0000-0x0000018F364C0000-memory.dmp
memory/5572-714-0x0000018F36410000-0x0000018F36420000-memory.dmp
memory/5572-710-0x0000018F346F0000-0x0000018F346F1000-memory.dmp
memory/5572-709-0x0000018F364A0000-0x0000018F364B0000-memory.dmp
memory/5572-708-0x0000018F36400000-0x0000018F36410000-memory.dmp
memory/5572-551-0x0000018F36010000-0x0000018F36280000-memory.dmp
memory/5572-587-0x0000018F362A0000-0x0000018F362B0000-memory.dmp
memory/5572-717-0x0000018F36420000-0x0000018F36430000-memory.dmp
memory/5572-718-0x0000018F364C0000-0x0000018F364D0000-memory.dmp
memory/5572-719-0x0000018F346F0000-0x0000018F346F1000-memory.dmp
memory/5572-721-0x0000018F36430000-0x0000018F36440000-memory.dmp
memory/5572-722-0x0000018F36440000-0x0000018F36450000-memory.dmp
memory/5572-723-0x0000018F36450000-0x0000018F36460000-memory.dmp
memory/5572-724-0x0000018F36460000-0x0000018F36470000-memory.dmp
memory/5572-725-0x0000018F36470000-0x0000018F36480000-memory.dmp
memory/5572-726-0x0000018F36480000-0x0000018F36490000-memory.dmp
memory/5572-727-0x0000018F36490000-0x0000018F364A0000-memory.dmp
memory/5572-728-0x0000018F364A0000-0x0000018F364B0000-memory.dmp
memory/5572-729-0x0000018F364B0000-0x0000018F364C0000-memory.dmp
memory/5572-730-0x0000018F364C0000-0x0000018F364D0000-memory.dmp