Overview

overview

8

Static

static

3

2026-07-12...kl.exe

windows10-2004-x64

8

2026-07-12...kl.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    26s
  • max time network
    136s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 12:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-12_751eeba9b8773733f46f107dd752a490_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
  • Size 29.4MB
  • Sample260712-pya9tab12t
  • SHA256 90dc8b024efd9e8eaeecc0732732b8adc817cd8dd3dc66f850c5479983b2993a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_751eeba9b8773733f46f107dd752a490_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-12_751eeba9b8773733f46f107dd752a490_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5188
  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_751eeba9b8773733f46f107dd752a490_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-12_751eeba9b8773733f46f107dd752a490_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2876

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 29.7MB
        • SHA256 afa6000401748f187908362377145733709d68149fa37525e556de226afcb98b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 58.8MB
        • SHA256 fec277712c1ff57badd5495c2279c1fc9f3e26d8e0bfa87bbf7e80950603affc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 62.8MB
        • SHA256 ae5fbe17aa3a014ef8dee450adcffa155458f2dcc6834e04774f783d28d8b065
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 59.1MB
        • SHA256 b477043b8d78f5ced8331540db96e357f7e859553545d71454537bc95594186d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 31.5MB
        • SHA256 b370440d4ccfc47cd757b07d63122b92fa1f28b72d06cabda8b0631c818518f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 58.9MB
        • SHA256 d0396ab1c4167d1f33cf742d9f5076ba5df68b5106b6d1a9d10469278f624cc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 52.2MB
        • SHA256 9da10c363fb5010b29a6e33c0a977cd8996aee727f26dea8374a9a0d326e0035
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 56.0MB
        • SHA256 982ffa3f3114a9e41f045dfde55e0db216b20795bc80d96d31c7147675c45189
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 53.1MB
        • SHA256 5b15155052b04bbd62449d220af9bf822d3e59139f695be3e1f5174bbbbc8789
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 52.1MB
        • SHA256 abaa7a21688504b46c57fbdf79b2dadba147f3a14de0110e536d0f25ba3c4c0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 51.6MB
        • SHA256 79ab9a3e99d7e538eaef1c07a500d8813abb1a0610512863f0973affc4afa4a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 48.6MB
        • SHA256 a745717dbafc459ad5bf536ca916e8a490bd517ecfb08122045320f4f966f57d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 48.0MB
        • SHA256 e8751347d99e7fb2a08aa9dba6af40ff89c2bc345f9cdcde3865e5b87d9158aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 45.8MB
        • SHA256 9ebe62d843fc517016243e1912603229bab8b907c07f762e7b5d9afb56ac3a1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 45.2MB
        • SHA256 6c30a9570bff1cc05126e3526bc5f1286516baebdc66672c8cb83c2b50cf5391
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 44.4MB
        • SHA256 e151ab59bdd9e49ac5ab4e041351e9cb603b86fae77d5af9ddf5de97352127dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 42.8MB
        • SHA256 4972e1cd0a7bcd1ba5702825c5c163d73bb48e37981633b2c33cedc57e0e94d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 38.2MB
        • SHA256 c10455f54486eaa7a2a48e8be3f59f5660ebbf62829ea351bf1ce17db43ead49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 41.7MB
        • SHA256 79a04018d870a4abfad19651423344cb35a17592c90d337ef632ec93b790987c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 41.5MB
        • SHA256 eaae0cdb38ca9360129665caab553a10a8f596760a099e1c2e604a89cdedd90a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 41.2MB
        • SHA256 014d8ad4615b0fc850771061b974cceffa41aab4e141c382cde52be2d12db6b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 41.2MB
        • SHA256 51dbad1f3daa31cef5004106d6b42e10165ec0465ddc3e391cc0a43e3ba134b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 41.1MB
        • SHA256 137e94d09f18a5437befa698726a59075938bb0246011087ac2b34f803886c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 40.9MB
        • SHA256 1c26d1432445c5957a568a316aa595df18413349d781b53ab104c57bd3668be1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 40.7MB
        • SHA256 d3075d5797ebee72a7440aca26658621375f973ff6271d92c0a1920578b88a58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 40.6MB
        • SHA256 565edc2bac9e37af8095ba29315c7d0481bc914d8d0c88d79bda493ebd113b79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 40.5MB
        • SHA256 f95d4bf358f06ce895ca6f0e2e3c439eb7d7af76cee692d93669cde4479e76de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 40.2MB
        • SHA256 0c55a5531c58264a441760872febb4469c1d964129282a5e4c6d61fb71148b67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 39.1MB
        • SHA256 6b837b04d4d997382a064241f979c2a860e4840a7f35836d7cf6dcb632fe12a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 40.0MB
        • SHA256 46b0aae8e4bc047c083c446ec520fbe3426c897894c6c03a2e8ea371916c4e3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 39.4MB
        • SHA256 b4c08f3240397f64de7a8a702164409befe551d62051343ebc5300ec07fa5c7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 39.8MB
        • SHA256 04cc39701c6ad797a286522b273bde1bf9682d314dd4d56414adfeef241edeac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 39.1MB
        • SHA256 de2baa170b9823c71f88cdfd23e189371eccc24df698d171707accfc48b25b82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 39.7MB
        • SHA256 f2629ecf00f54fdf450d670b2b5be2bef2fb2098caa4518bbcb3df9c08733985
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 39.5MB
        • SHA256 44f6de0968f792d83738bedca59a82551f4d705b59e45902f5dc2261c8c75094
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 39.2MB
        • SHA256 944a5352b4ce822df9abaa6948e06ba1b2266f0170bde28567a53f7a03dd4d64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 39.0MB
        • SHA256 75bedd935449b466d109c52e79c607ede020de48d91761d6a599e5138e55e067
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 38.9MB
        • SHA256 16219f2176252bbeb56d8ffcb1e43e0a6bc9510d658853e39fbda102ed5af63a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 38.8MB
        • SHA256 de42578de48615f5b2be884b1cfa500cc62e8da9eb021986794a1441b963988e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 38.8MB
        • SHA256 9315b593eef6056378b20bb6805de16163091c5cfeac812cf3ecc7e330e5a95b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 38.4MB
        • SHA256 84fdd4028964b6ccd2bc6a49ac58f32c09548c114c91f0d97731cb543de1083b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 38.2MB
        • SHA256 1a43831ad8bcfd6d10e3e2c9e64ae7d831810fc0bb3cdd8c5a15a0d1df2c470e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 38.6MB
        • SHA256 e32d2fb53090dee0983db66296c5f19919cf6b226807603a7d665e475a2b678b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 29.5MB
        • SHA256 a5116f1db8ff031b1af0ff9d27913c67e48c2d4b67d07236f29300ae2805fafb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 29.4MB
        • SHA256 9f46ed149163e4d535e94fc1b3c57a4d0d484956702ce0159e6fe8cdefff1d1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 58.2MB
        • SHA256 92bc2b3fee6a4dbfc24a68f40af44bc19822c003b0126bb589c43c0e08377586
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download