Overview

overview

8

Static

static

3

2026-07-30...kl.exe

windows10-2004-x64

8

2026-07-30...kl.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    61s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/07/2026, 01:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_8eaf208e089b31c83dd4e43a8bc83213_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
  • Size 32.5MB
  • Sample260730-brscvsar9w
  • SHA256 b312ce818c515d62b54dfe742fccd1c9a7e604a377276f18d3216e931690a190
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_8eaf208e089b31c83dd4e43a8bc83213_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_8eaf208e089b31c83dd4e43a8bc83213_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4432
  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_8eaf208e089b31c83dd4e43a8bc83213_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-30_8eaf208e089b31c83dd4e43a8bc83213_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4232

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 33.1MB
        • SHA256 b19ee8671a710c16e5d045bd911543a416df5048b668d6ce985573a361a80160
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 38.5MB
        • SHA256 a0840e199e53487ae5645cffe874a8e659181322ecee03a15651407cb4965598
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 66.6MB
        • SHA256 d3b95a303253b1629050971a761106c63db1a475ff60d9f27736b63cf0b6e1e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 66.8MB
        • SHA256 4684611d2cdaaa2119ad93c550f224ae9a787df30e2e66e01e5188d89acf08f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 68.0MB
        • SHA256 8f2ddf866fd1ac81d274307dba46eb4050164e88fd2ecd442edfd2329d842ae3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 66.1MB
        • SHA256 11f55dc7775f9e544a400da9b0f9807614224188919bcde7614b9fb38be6b90b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 64.9MB
        • SHA256 05bca49db95ae521d5be5c0118ce8d4cf2fbd9ce300b1982d52bd6313b0b104c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 64.9MB
        • SHA256 c203219c931c8525a3dfdee53cb79fefcd5bcdbb27073ccd9144327d4a3e0a09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 64.9MB
        • SHA256 8392b70aa8ae789cc58ce1e374338503af80ca65797a6dbef57161eff27ae12d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 65.0MB
        • SHA256 cc2d62af9051e2126855ca6e45195b607c6770bacb246ee5917bd26fc6833269
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 64.6MB
        • SHA256 b6fbc63f3460beb27a87644d71cc60e9513d783b00f9bd7dce7cb0aca68014f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 59.4MB
        • SHA256 4bd673083e0f0542c01d06104d81fc8ee7c569d617680ff08546167982d6c04b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 56.8MB
        • SHA256 1fa60fe42df7d7a650c75d4996a2f09027a5558da63ca3fd1214852b896e1a5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 53.9MB
        • SHA256 88894c1c80f2849ae2ed9c627e6facbde777bc0194b8e833714f79ccb07db21a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 51.0MB
        • SHA256 7cd405c2543892723ff909876413d443116cecadee00d7b37950a316669d91dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 51.5MB
        • SHA256 e913f0325df8bceef795489f29c10875052f4526622b64c0454d91b0a3e8b93b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 50.3MB
        • SHA256 5b4329fc389af3a539c9aa8d7688810a990791a223754ecbee0aa419a46ea472
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 50.2MB
        • SHA256 3f689b76c403b8e3a82cde8b7389c88fabde22408749ce4f6269f6024b5cf759
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 48.2MB
        • SHA256 ff81e4b1dfbdf0d7e90670c7b973c3bff5c377aee02b178e384706c2c72d802a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 32.5MB
        • SHA256 40bec54eba8a60a39f11699d717fccb7d50321b68c5e17bd1956447e4bd099c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 48.6MB
        • SHA256 339cefe5ce1dbaa1bad486126f239ffaaf24ebb2e012818affc98b209bbeb9cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 46.9MB
        • SHA256 210be9b9563f1993285a30d59e4b408a3a3e796a2a4ca897e387fe43fbefd81c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 46.5MB
        • SHA256 1af511bbeb2725892fcc12abb09146a6b49bff3a376bca0cf8caa0cdf4110ed7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 46.4MB
        • SHA256 ae8ddead5b1ac03e3ecf3b3a32c6c2dbadb8b0cbd6a4527d5dce0900828cbd11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 46.0MB
        • SHA256 ab9678e506d426da693bdd792093645976df04b6c21a8689c9bbc38b8f3862f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 45.7MB
        • SHA256 b36dc995efcc9d40403383dab29b9e157b99726db1bda38d23b1500bcd9a1322
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 45.6MB
        • SHA256 0200ffb587fcf29ff9fe15e7c9771ad4fdad10beb55318cac31be53315e6c574
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 45.8MB
        • SHA256 a0bba4bbca6296c080ae4272a876a1a15d35d4523c99d63dc9baa25fab9ccb23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 45.4MB
        • SHA256 748301009fbb625ec113e241f6e64ce812c2ba3a2096b2ba7f0ed6e6db9ea047
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 45.4MB
        • SHA256 0621175f00a1727247a881bd8810b2a57457d9b5c7b6cd0a6857dcb7838f1ccc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 45.2MB
        • SHA256 c5e0138babe00ff5cda72102505da6656009e760486d296030de24475838060b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 45.2MB
        • SHA256 26ad336ed1f7d6ba032ae566d83b805ce6a0335ed81b016042cfbd8b503ca98f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 32.5MB
        • SHA256 b312ce818c515d62b54dfe742fccd1c9a7e604a377276f18d3216e931690a190
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download