Overview

overview

8

Static

static

3

2026-08-02...as.exe

windows10-2004-x64

8

2026-08-02...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    41s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 23:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-02_cabade1dbbb20b24022ba7107ae971f8_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 44.1MB
  • Sample260802-3n1zdatfjb
  • SHA256 67ccd188c07c6a0256a795df7028bd3d680f085ac24fe9961eea5ac96b72d868
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_cabade1dbbb20b24022ba7107ae971f8_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_cabade1dbbb20b24022ba7107ae971f8_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2456
  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_cabade1dbbb20b24022ba7107ae971f8_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-02_cabade1dbbb20b24022ba7107ae971f8_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3076

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 44.3MB
        • SHA256 507562d394b8c8e514db040dd456cc6fe7e8576005ded6c3fe8bcf37c35a8f4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 78.6MB
        • SHA256 e93b1ae1fc823103c41be4ead49d1fb00891eef279a6982a6db57b848e3ce411
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 76.4MB
        • SHA256 5519d9619ea25688550184742ee2d660b2a4e155780712b33e31c56452a39688
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 71.5MB
        • SHA256 5dc94a331dca119184f15dbbe24728ceb1993e1d07c3eb0d886232871b4a80e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 46.2MB
        • SHA256 2054218ca7a250df3a67cbf670c34d0ff7f29612fc47a9a1160aeedc4f7d3b04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 66.5MB
        • SHA256 b760971a1fc8aa154d59860fcdd2c7eb6840ad72d87c06771403737aa2336c88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 63.6MB
        • SHA256 23905c918947998e7ef6702988b5742a7ed5651e99d572ce85946030064f3a67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 60.6MB
        • SHA256 728d40a1775e629661f5ce8ebaefbbc09b4d17f6e8ddd97d300fad74936c60a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 58.6MB
        • SHA256 4239cd752ad7cca4f111cc772c9676a6c646fcf01d5a8823437a1d89a8aad619
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 54.4MB
        • SHA256 dabab07b363f086a976407b53df206a34defe6b0d7398b48a920ec088e388b42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 53.7MB
        • SHA256 c4ff854a32b26b73bc7a80f11743063c686769dde6dcb9f858681966048d1176
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 53.1MB
        • SHA256 2ee98a4ddd2b0139101a12f70c05f8f3ee9e8067a0fff4558fb39f468888a40f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 51.1MB
        • SHA256 c7c5c7776f2e1ee4d8add9a80c93b15717ca4a7cb9677882029246ae36c7ca6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 49.6MB
        • SHA256 2c3b9d0568bd696581b94bdd1f5de261028d5964a7872d3c5897e54e38e79d03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 49.0MB
        • SHA256 8b5f181af24ad13f8076f315498754d148df37a996f030db667938568cde138d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 48.1MB
        • SHA256 fbc1321a6f0c3488715147a4a8ec30ab7d3e0a4506704d0761d68ae8b7188224
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 47.9MB
        • SHA256 f422551817b8983989a8169b11e63942057c7d1441de3e8ed166d7b73d10730b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 46.9MB
        • SHA256 56f1ae7a206b2ce56bfcc628709e7aa18fc8219bd80b82909effe8cb37386900
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 46.1MB
        • SHA256 7ddf48ccd8fbb15e65a51f747fd88375502e5e83eadde8e34e5d124d48b1cabf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 45.9MB
        • SHA256 70918e02cf41fa085a810e6d2027d8d6eebac7c0f8a10c67103802e1371bc3f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 45.5MB
        • SHA256 b1e6dc4e2933573e619e0feb847a528c835cc9098411cca1932438ae7a0a8dac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 44.6MB
        • SHA256 1e8d941f57ea76151414bd6ed83b9909f5ff24e0f91cbca26b71a42ecaf16228
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 43.5MB
        • SHA256 d385e8f405b8ae75e855139020f238f7af283a15b60fecef45e7460ebe1118c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 40.9MB
        • SHA256 0068320e4416f8c8bcd2c2a02a063d527468c5d093d6b2063595aa5af7f8ed96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 40.1MB
        • SHA256 bd4b55fa400ed64e544ebd041e44fb484b67838607889cc7b01224f97839898b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 39.3MB
        • SHA256 17ad3447d93bfee0f0abec90dd1ca2cc7adbc8e8552265d17024a4ba43916594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 39.0MB
        • SHA256 5cc38654804606e8cfdbc5e9c8821604c15c5ef82729d34fb2a48c5d19981424
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 38.8MB
        • SHA256 97cdb661120e1325af4ec68f9ac0bd26f87128d6ebd9614778971b45e3ae1452
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 38.6MB
        • SHA256 d835b88d61a6b2fec52b439a3485f91349e2325f074bb956bb1811a34665b597
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 37.4MB
        • SHA256 2490f97dcc48bc6f5beff627570bffbe5d23f2e1da1727cb374721ee6343e2de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 36.4MB
        • SHA256 5026e935b0eb0f62c71295e18103e39b59d3861bf4ade2375e64d0a6338c0290
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 35.2MB
        • SHA256 fe9992e899d921f6d6d1e2e4976596b7252f3c44eb142e6bb93f34efa3ba37d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 31.2MB
        • SHA256 049a7263a4556ee28c5b2a14ba7be18afb1b7f428bfb57dd8dadbf53852625af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 30.3MB
        • SHA256 a1a702c84e790a897935a18699eb68df0cbd9125c1e7b399c5c3e481fecffd4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 29.7MB
        • SHA256 8e6b1e705f935695d2809a6d3c332e31c9a12d4e08f07ed59c854bc8d49420b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 29.4MB
        • SHA256 b15bcaad7a396741406d7976caec95cfac9b7459406c0b1f3d829bb40394379e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 29.2MB
        • SHA256 1d466e82095d32e6f27d44c70860092cc6dee8e868ed63b0eb48b59f1bf577a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 28.9MB
        • SHA256 f764472b19039618fb579565d486e832e8166a4986a60edd5041896802d288fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 27.9MB
        • SHA256 58439599e74219dae9985e1f296ef9b9960bceac74e6fc4bfe4de68336a0fc30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 26.8MB
        • SHA256 239618a5f23fead4f0e10b55c213b918ca3177ff05f86ba2c3ff507bb4bc3507
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 66.2MB
        • SHA256 e2acbcce1f7f85cdc8824dccde34a6c84a5a88c73027e95e84e826299465019b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 64.6MB
        • SHA256 a0fc07d79d0e432bc532b711a0bc7eabdaa411d9e9f550b07297c76b27f7220a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 63.6MB
        • SHA256 06bc679ea27e3f5fd28dc30ee932e9764a199d719af4538c6dd9d3fc8f0e5078
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 62.9MB
        • SHA256 a40d9757440aae215c3b4a8edeb343fd9e78879af9167fb16889bf70eb5ec270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download