Overview

overview

8

Static

static

3

2026-08-01...r_.exe

windows10-2004-x64

8

2026-08-01...r_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    17s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 01:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
  • Size 38.2MB
  • Sample260802-bdpptaar91
  • SHA256 844a737f758e96cb0947b508cfee3bf3e0bc202f312f75cc26c6f964bf306f30
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1668
  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4920

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 14.6MB
        • SHA256 e8d95f213c328f37c8b9077fbbcc53a9cd01ee4d169b8c7b4fa2f937cb20bda2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 15.2MB
        • SHA256 25a3ba202c059e558c85c980b67cc7be9f672dd0fab8bb8ca8eb84a156ebaab0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 15.7MB
        • SHA256 a36c4516d961ed7263f8b780aaf4e30b750350613865b2ca99897053bee8c41d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 14.9MB
        • SHA256 bf0d606e71ca048840ce0f2fa6fc76e4810e2f3b5bccc636d9e50c4b11228acd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 14.7MB
        • SHA256 87fbf9d4251940507e1e619c68a6532b54af7a2d562275c32ed1f03449c33f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 15.2MB
        • SHA256 347da703e3a267a4fe3d45f85ffa32940e35f4a1b7e3dd2b119eafeb59efa85c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 14.8MB
        • SHA256 bf0a1500f55e91e810cb45dcef9a662536297d25fb740c7a97b6fa388a399218
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 14.7MB
        • SHA256 ab17c9bdc30ec3ab999b4115faded5128d753abf8085c18debb36d8515643eb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 15.5MB
        • SHA256 13da68fa07b96b172ceca809f1f23e8941f750c02a8f65471e5ba8ecbcc621c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 14.9MB
        • SHA256 5209b60fc9631b13e6f8e84eeedc852dcf5487aa304b68647ee2812f99fd1951
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 14.1MB
        • SHA256 37e86cd4fc9ecd38c9bf183a03a9cf45d28766bf4d0da4cf2944c0fa984f08e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 14.3MB
        • SHA256 add892390954047b03b8155ce22491749b427d245fc1e55979656c14223a0fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 15.7MB
        • SHA256 5f130a9796c941f3f1b37830fb0b2593de03678c68c6ff745c10c9b0fbc0a64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 14.2MB
        • SHA256 28e5d9993907486f13a39c61ca1f6d24b454a548e6cdfd9c8e635e1483fd2f22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 14.2MB
        • SHA256 40bb643f7f220acde1eb3c3b769629606788436dc4c3781a3363f7bdc74a6071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 14.5MB
        • SHA256 4cbd0f07d7d90c22a32c17f513b7f6460c98786f403e109b60e0e9d294ece1dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 14.7MB
        • SHA256 9a05f103a51c8a6739cfbfd1c049b763d3bd1149fa83d8b69d24f4a22b3b860f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 14.2MB
        • SHA256 72817fcc101f5137e637078893b612ceac907def6e8b00cf1f8551249148b9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 14.4MB
        • SHA256 00bb7f7f7e757fe799b75f8ffb26292d9b703c869d45333f450f7a5fa885a98a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 13.8MB
        • SHA256 2eca37e8478f00b55aac83525ac4fdd272ecfa61fa659a2c7401cb630aaaadb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 14.3MB
        • SHA256 e6280ba14448ebb0bcf1cb04fe42aff210c7d187533f133a844ada5cac9840b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 13.8MB
        • SHA256 0a2f448f3742210466ff61bb426cccf3126e0e5a7a42ae125d2f2142e4107d09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 14.0MB
        • SHA256 14ee3adc2932053cbc1aeb0443d7a5ffdb159c63c293830a315600ca7f4d1085
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 13.7MB
        • SHA256 3cacc1fceb522d5a7b72d7b094052e3cef3cfc429c2411c613375ebeda42ec82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 192KB
        • SHA256 56d5b720b4307ef448fb38ef6495ea0a6fb25e8bfa8f9c140729b820c8e0cc1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 14.8MB
        • SHA256 4f10fcc2b485d905243e401387dce2e8db5bc0a1236b1e23c90f133c67eba9f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 14.5MB
        • SHA256 b59a813204883d648489db29e95d65fff68f364f7941de5a192f23abe9f821ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 14.2MB
        • SHA256 79684a877e5e673022e7c528d9cb529957244bf0e1121ea8bcb8941dae0b33b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 13.8MB
        • SHA256 fd650851b37f4d9e09a13afd333b19ce1c8983fdde41f49b9a30f62cd57f711a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 13.4MB
        • SHA256 ff94392c95e84d9fd51d55bcc9afca2bebf9f69ee6256d58a3a83d740c637857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 13.5MB
        • SHA256 3bb7d055ecfb1f70d18b54379dd814c3508d5d0e1707fce89ebc2c51a82cefd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 13.9MB
        • SHA256 9e8ce5171f9d444cc7a8ed3339a806416fc8266881c0d165bdca731bc162c266
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 13.7MB
        • SHA256 58f665b8544296350f0a5d0542eaebbdfa3e9dd456b7682cf2adeff86e62dbb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 13.7MB
        • SHA256 fe88abbc57f0a1feba4c91d99d3fcdb9256bffcd4f18f7341fe38feb645de99f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 13.2MB
        • SHA256 cf044fd701ff598b594f6312a5f9b9ca3c22e0618405e47339123816b52174e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 13.5MB
        • SHA256 b1ecfff1c7a6ee8360828673177e67b670e8e98ce10f44c56d7485e5a80fd90d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 13.3MB
        • SHA256 0f8d6edf49aa12df3fea07e55db2610fa41122f969d0bd67c2d0b461b60b7c87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 13.5MB
        • SHA256 345ca88513cc38d19c5cedd593403d6010c72454d73af77da0ac951e0d5d10df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 13.2MB
        • SHA256 da560e6a09a910ecb92fa3cff820b653e5b7494c24f448c8642dced4d3f4ebdc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 14.1MB
        • SHA256 1d73d91b609f5322f47f5fbc0e40b5bc0300488bacbb3a0c506c1d8fffec9c7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 14.4MB
        • SHA256 dfbd1d0c38eb109b58f958c56de8d3f9842d62b3df96bfeee77e272c7c91fcf3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 12.5MB
        • SHA256 73b56bddef7e5b67cb92e0e0ebecd7ca60a00677d27dd8740d9ca81dd4c88805
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 13.1MB
        • SHA256 ca34255bf5e0293b9083fb4dfae784221a0631c8eac7763a0b6833290c2475b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 14.8MB
        • SHA256 45579eef049752aaf8fd4ec7c163bf722b7f0d0f161516a86ca243d6c8bf3661
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 13.1MB
        • SHA256 efd8f71faf90ad0eac01bc825c02813040789d356a37d452156516515f0e547b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 12.6MB
        • SHA256 73d9df9ccf5d757256bf914fb9f31b9b35f7e0cd2328391d8fd35d57b8594c9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 13.8MB
        • SHA256 c68cbbbcf57508735d201259c8459483b2d195eb9a5d2aba9c9a8687986c87aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 13.8MB
        • SHA256 8ff1ad625ba52232c53c28863362355e9770c03940af244c9314209e126fef3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 13.8MB
        • SHA256 f86c7ae3bc5118576ae36b82de2b38bab87bccfe1da9790baeb9b903b15f4ad8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 256KB
        • SHA256 6adff2403606f3fae51ba272308ce91c8124c63f116c3d886a5a38b4ccbce497
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 13.7MB
        • SHA256 ade004274588972153f5bf53e90ee87d80275d32c312ce7f711b00c845878bf3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 12.8MB
        • SHA256 3c87fdbacd9e3198f4107346458e8fce6c4899caf4622b4bb18e5328198765ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 13.0MB
        • SHA256 597f57cfd7fe049e762e2f7bbd2a24a5a9172f69ce97b38ed5402647493f7558
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 12.8MB
        • SHA256 6efa041dd61ebb54be887ea822dde261e398cfc603ac4357f85c00fe2a85fe7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 12.9MB
        • SHA256 e87755d497879bae2aed8685068a1fe89f358bb5944f9f7fc18a8ba42820560e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 13.9MB
        • SHA256 063d459d68bc2196f760a9c26606026600b8636385123660e6abf31ead20d06b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 12.7MB
        • SHA256 a2f0b37302fa3be7be8c4d61d011c568a89fb2063c02546a6bdd81b5d90d2900
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 13.4MB
        • SHA256 e72a923f89b689eb1d12f91e4286ea49592d8e3450809cc8ecb91fd62e4a85a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 13.1MB
        • SHA256 b1094c8bd8c25fd1697f7052be17b0b74dc0d043184f6ad134bbd19c8a0efea5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 13.7MB
        • SHA256 aa62ab3a37bf89ae0f4bb6f1aa759901de6b5d2843ddc2e2a578bff1eb95231f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download