Overview

overview

8

Static

static

3

2026-07-07...r_.exe

windows10-2004-x64

8

2026-07-07...r_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    41s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/07/2026, 22:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
  • Size 44.8MB
  • Sample260707-2b2jpse161
  • SHA256 dff041eee9855ca5d4d8b9901c18f12395b3be79f3d9aee8d6d475e40c4a429b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2240
  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4736

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 18.0MB
        • SHA256 6395d20392067fe075ad1158c58da6f9d324a4daf00f5a246de011db96e0f41b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 17.9MB
        • SHA256 332f30d51e330bad0c8881547f8d939ca7c7fa4972316f44a6bdc3b0e87aa404
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 17.8MB
        • SHA256 543e81851e89a6ba3b2b7a946e14fc0b9ecb4006b52fd0dd5834e087455288e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 17.7MB
        • SHA256 bc6d774799930ce3d8b7b90cc35f4294cce3e6161fcce3c2c31806e75706464f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 16.9MB
        • SHA256 21baf19cd4ce00957dc696146c5e51f83dbf120c160ed8a84c6a966103fb325b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 18.0MB
        • SHA256 b9341d0faad402675f327d6853e2d7b9080afb66a8ded95834aadd5e59a79f89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 16.2MB
        • SHA256 009484902ec7df0f563206c216d962b50ace4620d7bd11623827108c5b331b9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 18.7MB
        • SHA256 a6156b874b6e88da34f2244fa605ea3545d1ff68e72e6937da394f8387113ffc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 16.9MB
        • SHA256 a4a87f8f38c21b54fcefdc6e932d80b3765b05ce85ae74e8ec0f4721b820dd2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 17.5MB
        • SHA256 b3048da85cbaaae551d968812594839596f82975f86bc11cfcfcf03f3e7ec110
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 16.9MB
        • SHA256 257ede1f93bd0b73124a413f66ee9907bda7fc5768e04fbfa897cfac57124d55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 16.6MB
        • SHA256 34f420108afe50d0542a4136bb01aa5f567533d38929c13b8a5781aac5015a19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 16.5MB
        • SHA256 a750768d07933113a1b9a5ac8f6835e22ee7931c9611dfb181cae397f45f1325
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 17.3MB
        • SHA256 fc97bd1e778360f974365424feebf2a26d1de0f01c40c3b62985ad80ce216635
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 18.1MB
        • SHA256 5c0f06acc67964287b20b0533f1ee05937206e9a4435461b572ae36ba7c86ca7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 16.6MB
        • SHA256 42cda7003ebf5db33598c1770ffa3fdcde3eec84a677cdb6a805703a5a7fb279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 17.1MB
        • SHA256 4d4dbfc6cdd492a4bdbccac4d87de01d5d3d2700a947ac29857a1ba590d62ebb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 17.8MB
        • SHA256 5b1c455f566a47b3f07e3be4a3510607c6db218d159a49e16d6676f1e11f5cf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 16.8MB
        • SHA256 69157f5b1c7cadf68922e3d5da3950e0fadfb751d5cc45cfa194ba7f2873a77b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 16.4MB
        • SHA256 fd69cbf34c440d72168656c50e3cd180908b5a01e91fde6df023ea05661ad035
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 16.9MB
        • SHA256 2eb203fa04f5c5ee56205729e3d4e9b419258391d54db330cce49296e5f9fe23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 15.8MB
        • SHA256 ddab9ba56bdada2dbb96147c1da52144776ddee2031a6992166ba4a4c610ccab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 16.4MB
        • SHA256 b28ea6355ce0f207b979e79f731d7599fb57d4bc6703feba257d61e0f715bc49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 16.7MB
        • SHA256 64225bfdedb121ffadc1ee35b7b01bee3d11e00ad89dba4d961ebe33603dd5ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 16.1MB
        • SHA256 c3a571f1d3a508c764ad0510ea7af880fd813483c74dc55f4b847db0d01b4070
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 16.7MB
        • SHA256 eabcd6c09e8369347b55894d768a7ce09b2d58a3405b31af0d38e4f3140dc5c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 15.4MB
        • SHA256 eae7ed42aa161ec7e6ddf9e6f8a6f6e8c6b7963a97385842081fc345ac35b897
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 16.2MB
        • SHA256 9f43aed16238e0a952edf2534c49bac2d18b491f873575e8c2c97426ad77e440
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 15.5MB
        • SHA256 00d3c8c48a5ae523154515a4def533adb3af895f2c50c25c8a650556ff7f111a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 15.6MB
        • SHA256 752e21150bda7d12f2f60955a07a41f8c5b18ca221226b5e4627443e200e49bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 16.8MB
        • SHA256 42c5f9ebb194821df003f032bc6758235151da4178a126194a1c4db7ae433a43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 16.0MB
        • SHA256 ce97790c20041a798c15366670bf06d49cbec8750848178baaf8d35f1999e10b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 17.0MB
        • SHA256 6e03aa6413dc4d0da688e00527f6bb5cc3244fe4eaa58b34e2a60b7d4cbe5b76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 15.3MB
        • SHA256 4f1c4aa637a8094031f9c9d575624e9ee4d5cd8fefcbba1d0ec117dfb9e878b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 16.5MB
        • SHA256 8d5ccd0d5f63d0e056ea92f93e1ecdacd81634c4d6ea5ddbd39ad33ae7bbaa26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 17.0MB
        • SHA256 59bef2c8b24f131df1679b7702d2392b61f35038e3f85bb5666c54285e07985b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 16.4MB
        • SHA256 dafcbf4e07b1320edffe58b73fe3e49ee396304d23776725e6d23b3f90f53fe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 15.2MB
        • SHA256 9f059d24ba7de8cb3abfa1ea5017e23764db5bdb2cb77b14f8b9cc8175a62f7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 14.5MB
        • SHA256 eb614a2e69ce9af13a9cd49d52e2fd9cdd4ab30c9a0f0eecf0136652ac4346af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 14.6MB
        • SHA256 0fbe71b339493dd2a19bf4bcf0b8c106be9b07ddca0279d17f39aff7604c30e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 15.8MB
        • SHA256 65054de88f0dbe051a8d94f15f2fb26b179a3ff629beddb2a265f9e019f4099d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 15.1MB
        • SHA256 1e05c7fe040419b1b71be1ad7daecaacd983eb25ed0ae603f634e750b314bd5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 16.7MB
        • SHA256 aa55358d0cfc26789d55ec41ffbbdcb4079d966782b13c6e3fc1a58c41040dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 15.1MB
        • SHA256 866cb92f3e36ca4a0610d1d450e18a4f500b94cb7e866bd78c2db9220fb34223
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 14.9MB
        • SHA256 a30a14f6a5d0cf9519e6472cd87e64926460871a6bc687ae3dbf84aa4265e3fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 15.9MB
        • SHA256 aeddc8a2061f6f781005dd007c682eab4f33444236ea81a57f8df03d20fe03b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 15.0MB
        • SHA256 522ec0afe6e0f0ef899d649ce57982163c5e2a51301196986387c41f08364418
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 14.7MB
        • SHA256 be5e23a7e1da0a5933d2d47e0e01e16c738e477cf4d0e3abf499e3ca3a076b91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 14.5MB
        • SHA256 2f9eac0869a51861287be03e8bb7e0ecba3dd9ea37f94cb4be0d0d1e8cd3d009
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 15.1MB
        • SHA256 6e7e0c83259e7501fd5de3f93ec28a37a67d09a7f338a950043d3476a06f0068
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 16.1MB
        • SHA256 7d08afebb97b568b9967804ec9d1c4ddddf3d41e9d52e4ce3b787655bc888849
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 16.2MB
        • SHA256 5d6329a644ab64ba87f77e0056509095145ff147b137edc22e2422c8809081f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 14.8MB
        • SHA256 6aeaae950f7869aac60eb5df0faf78c74fb6a01c35f3bfcccebce5a614b6b054
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 15.2MB
        • SHA256 22294b2eb778b668b64cbd063d47f8fbb703dbe225359a12b2c2ef14e3dfcea5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 15.8MB
        • SHA256 a957fcad85bc8dfcf7ce9cb4413910ffe047d2b5b4dc80b6908dd279b79fc17b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 15.3MB
        • SHA256 9ea60e3c1a50bf7a200a7cdda158e0208fc6d1e68c9d25868be89d6dbd003978
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 14.8MB
        • SHA256 36f8d586a2d0a0d277b0bbbedba4766e4c89b0cdee9ca2297e52337c532ed9db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 15.0MB
        • SHA256 102c644208ccdb2b8d4bf5f2b951a4f604db987b8b26f38af34545094dbc5017
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 21.1MB
        • SHA256 79aade9075d87cd5cdd3f72854c848fea23bac87b271c4cd432692f737eaf6b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download