Overview

overview

8

Static

static

3

2026-07-06...as.exe

windows10-2004-x64

8

2026-07-06...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/07/2026, 23:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-06_f9bba71089be1e6eabbdde29bd0ef00e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 21.8MB
  • Sample260706-3tadlsaw4k
  • SHA256 80789924dad89ee3e90e9dd1a2e5b38afb648e316a949a72e2b8dc08934bbd77
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-06_f9bba71089be1e6eabbdde29bd0ef00e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-06_f9bba71089be1e6eabbdde29bd0ef00e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3336
  • C:\Users\Admin\AppData\Local\Temp\2026-07-06_f9bba71089be1e6eabbdde29bd0ef00e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-06_f9bba71089be1e6eabbdde29bd0ef00e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3732

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 22.2MB
        • SHA256 e80eddbf87f6472b279a087c530d9c3124d93b218769afa9e293bce444091dee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 24.0MB
        • SHA256 120f7feba02e5a7431a5fe64adb18788b093d617e2bad4ee6927634aa5c09b7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 40.2MB
        • SHA256 ecd00e6fcdf3507c8d9395b3c97a82f5844d50fb3cf9c5b664c832c92be0ebe9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 32.6MB
        • SHA256 d7fb89955433ffee3f1d89a7439be89534bf8e132c7191efc35344166b1f70fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 34.6MB
        • SHA256 dbcde388e5c7adcfd71d66471132a35f324d6af2c9b87ee5bbe85f25a5c54074
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 31.9MB
        • SHA256 9096bb04de15c72a6e35ae7fa357218e4a9c7c626a5cff832379b67fa23d3b44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 38.6MB
        • SHA256 9556508283254ed01f0216c9ee2b4d3c45f919bcb7211cce5f017eb0e93cc8cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 34.9MB
        • SHA256 0a4db681e6478f3548814a9f5d3267df94bca2287078ab86e4da631f75c01188
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 35.9MB
        • SHA256 4a8f70b454b7e1303912d318f9bf02e8844ae7d8754a3b7224b27260478e5cf3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 31.8MB
        • SHA256 1e01416fb7bff7134ed68dbf5106c17a98a48b63347b0ddc108fc81d31856bc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 32.5MB
        • SHA256 607af88a6ba67c983b68151f2ef4d44e0a6779bbe389404cc838ca1706204246
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 28.0MB
        • SHA256 cb73a53334a919052ea95d6965d7e7c6795b268f677bf9c5e724b8c1a8e8fbb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 36.4MB
        • SHA256 b3f3f2e20d388d1909da1edd310275edc6662c54465e77c47d5ed986e68adab5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 31.9MB
        • SHA256 5f29a73c8093c205730941481bfa439ffd2ea67756c5084b7223eda2988b6737
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 34.9MB
        • SHA256 bb7fbeb0565ac4f9eff5db74f7ebf8c1ae72250fe913f6cf1fd21442ebf2bc61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 36.8MB
        • SHA256 3d149324ca40f14d225c05962c630240fb11d57498c02a439ffc204c1306b8cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 34.2MB
        • SHA256 3fcbb757b1b58b82d6712710fd4617730c899063769905f16a8f2a3faff573aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 35.8MB
        • SHA256 dae259873cf1196e713796226770ea42f96be29b69df8b42fac7883aa8086785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 29.7MB
        • SHA256 e9665ad80c8baf98a814bd288f7f4b9e73aa22f262e66d2a73a50fa33aa52e0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 31.2MB
        • SHA256 72d8785a48ea4e8295a737f82b056a7a9012cc44b2204e722392f8cc7b827643
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 30.0MB
        • SHA256 0a54fea9cfb9105ed4d76093bfda13704dda2d5618242bbd3d103f416a8c2616
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 33.2MB
        • SHA256 1de2f7bb4e3f404b8021868ae26ff81d9b9b9564ce0d7e4910219fd4791c93c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 34.8MB
        • SHA256 8450bf795d8600c00f0804faa25357f3010917da2fdf6a5df406418ea4013df6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 30.1MB
        • SHA256 a4969f7c95f0c8d9d922b229f420ba496799025193108043e2ab9815f96db910
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 32.4MB
        • SHA256 63dd305b13b664658aed316443a415d5fa0fbd1d88d3a406a52925dc70383738
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 32.6MB
        • SHA256 444a53c53f1f78621afd6e672b060e1eb1f0fd3d363e42b1dcd6559257a72daf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.8MB
        • SHA256 46accf30988aaf7cd54f90a2f37a90d23595c7e3dda4f24efcb629274e42de8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 34.3MB
        • SHA256 39312138a19dcd998e57e4cfd8c7fd1ac5b9f52ae77a80cf1fc6631fe9bbc3fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 28.6MB
        • SHA256 fcceca5d08cb6ad3ea540df84a638664bcd0b6b62f72392d78f1f8f33385f3cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 31.7MB
        • SHA256 47dfa4f74fb6a65e1844e0a014d567940454e80c8d0692f43b75baf2c6835a1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 31.8MB
        • SHA256 11d66362b93e7f091c5effe4651b9da6de599e4835ff3d8f2a5f7bb01faa7428
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 31.5MB
        • SHA256 07fcbd5777db39fb18a3934c7ad80c1aee95e02b8416551b7c5b7c8f721424c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 32.7MB
        • SHA256 8fb4804ccaf883feb32a1d87837b910dff46cd93049b93fb4cf549a507815779
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.4MB
        • SHA256 fafe9be4b9885e421602faf53fc836c61d1d60918bed705425ce67dd592581fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 28.4MB
        • SHA256 5079a61aec0155329c1f129a551fbeffcc13528c2dde54120d82f2b49e9727f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 31.3MB
        • SHA256 d443211960219837952a4c1fa06a849e3fe7ba250b25cf6da0a79cb9c8275160
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 25.4MB
        • SHA256 eece60891ea82e31ab4cd1249f56f7ee200cabb38cdad018f4b972bf01bce14b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 31.1MB
        • SHA256 64edfa95fcc8c30675287cad5a5ae56e81774ebe394281d41b04488e98232682
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 27.6MB
        • SHA256 6f224df2370b7979dd2dd6c1c68b9238170d80ca3f459030f54844f5f7e1d213
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 28.2MB
        • SHA256 b7e3097323e012346c6b37888f0089612a2e7d649b7e70153ca5c54d1de64976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 27.3MB
        • SHA256 448f1c72d750ad607cf2ed3450b69c1c6185ea5dd3b727d8dc55b8a314ba80b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 26.4MB
        • SHA256 f51649c79064a63222a38fcb96fceaee5ff1ec1a6fc7ccb1767c73aa75a34187
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 25.0MB
        • SHA256 146f324001f7a2305ed5fb643543a5dd56ef87fa678d59ead957539908a0e391
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 25.1MB
        • SHA256 f1d60199daca258bc76df8ead5520006c0fe12bb1f8c34673e1fb6b4a9da87e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 23.6MB
        • SHA256 f69928607122c58a2f0d7da9d8eeb7e9d723cd48e7cebe787b48ec7821b1a0da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 26.8MB
        • SHA256 1ad739705bdae1bc2fd227eb81993abdef973eeb9c896d0ab688bd74ff5ab760
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 23.1MB
        • SHA256 768146e9c17ece6c46eb6e6ee69b09ffa825249db50828598333340c1677ef0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 22.6MB
        • SHA256 2b0798cc310b2fd8b7889e721716b941aea8527d9ce87a826538dd76b76c7ad3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 26.0MB
        • SHA256 528a5227b8a75e3dcd1eef66863251b3d26af49b3a5e628cf3fef88a3c95b025
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 22.7MB
        • SHA256 d4e160c2f8e4d68d61f01e4e516e1a6af2a62e516d09359a2859bc413ec0a3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 26.1MB
        • SHA256 e6ac0d30e762761c751576958f4caebc912b434f1b6b074a9b49474b9e99674f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 26.2MB
        • SHA256 c5c7f25a78e4fcc8bf31bebf94052c49ac621d0eb38c7b803b8ec9b1cac63165
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 22.3MB
        • SHA256 3cb0f89bfc959450eb0a5a326fd6411f88590163571b82df71526f0ba3ddadb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 22.0MB
        • SHA256 c576753e322989c6d3b5eafa6b313d62e3ad2073a3a0edb885ab2f9cc7b89527
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 22.6MB
        • SHA256 421a5e7bab4d2a8a909b702bb637b47b71f22d81272c5cab637e0b1c0d76e1aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 19.1MB
        • SHA256 75caa26cdd8a34630f3f02851078850328d8c0efc43a15875bdeec9ee6c1e5f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 41.2MB
        • SHA256 927ff08be0499a481c343d01dae1b202b27bc6e5b51a6d070f181032b1a710bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 40.5MB
        • SHA256 b94a741f4796258dd1c8cf360b5e0eeab82b7b6e0d7e4dafef4bc907bb5063da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 36.1MB
        • SHA256 bd0fcef7fbd915ccc88fda4f41f0176649ad6b80c379d1cf5529815a0994fdae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 32.1MB
        • SHA256 925212eb7a288e1175ff6e4c7cca3164cf7cad476ef169040eb9d015cf8ea536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download