Overview

overview

8

Static

static

3

2026-08-04...as.exe

windows10-2004-x64

8

2026-08-04...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    43s
  • max time network
    131s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 22:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_c682f0443de3b4e4df54f316b998b526_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 26.6MB
  • Sample260804-18jvgser8z
  • SHA256 edb221735aad6335160bd4de66b01d4be2fd45317bc0264e1fb0c60eda533267
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_c682f0443de3b4e4df54f316b998b526_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_c682f0443de3b4e4df54f316b998b526_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4184
  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_c682f0443de3b4e4df54f316b998b526_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-04_c682f0443de3b4e4df54f316b998b526_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4104

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 26.8MB
        • SHA256 63da26aa8c8a1c5ebe7d7806234763546850f4fa1e2089598839d93d41af1db5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 50.4MB
        • SHA256 6343426f2cab0428c9203ddc241128505e8bf6896dbed4872fad12aab984f248
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 49.9MB
        • SHA256 8277fb50159895fb8ada21f45fc12d9d8c7eda2aa133a56cdd24552807bba085
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 48.2MB
        • SHA256 28514eaf0b826c883df7d0b52e049db71d228908c8a8a9b37ebde595262afd84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 28.7MB
        • SHA256 3015a8656aaf5b6510b7c8587ea256750d92021b1c7390afb0e11adf7bc088f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 45.5MB
        • SHA256 b814f61bc288d8e4c0df7c677195d1b7a6c5c9dd2df84ca7c06b7aeb96a57a60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 43.8MB
        • SHA256 22210db3a63b16486de944588a28a5a8ca6a5d336a7e90de6eee3beca22fb458
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 43.2MB
        • SHA256 5b01d61ea01031b35d6d2824004180975e03a3b44fe281a619a88ebdbddd0ba3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 40.5MB
        • SHA256 8b4ffb672dfd8fe133adeb4e578556db35de26e0185478026faf8423ee6e48de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 46.2MB
        • SHA256 0d488761c7b00ed33fa93982795bd55fd0e7f3642febca00e7d9d325b4de1fbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 45.4MB
        • SHA256 aa89bbc1716bfe5cc9c651a53e2866f64fab9f602689862b93f1a515756b7bde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 42.6MB
        • SHA256 92352b24356874e6f7abfa619c16af1d2c56c2c3c579fcd72d68e7bebc9a09b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 40.9MB
        • SHA256 fb00a7286f367b9225e9e49a0faf7ae19461f093b11e12bea855f71e97fe9a9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 37.8MB
        • SHA256 7aad0988a26030d3d64eab300dac5f720860457988e8bade97ff6b9c879426da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 41.9MB
        • SHA256 f531dd61c0d1324befd5b6d7b4f00513557fba74e532fa150b2f2ab9f1de1783
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 35.9MB
        • SHA256 b9d7496db28059408ed51e82d65557bc19b9312ef3f42c95aa10d99850689642
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 37.2MB
        • SHA256 f4abf353591f652a3eedbd8110336fa2724c7a925ca303c747064dae81b45175
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 37.6MB
        • SHA256 811370ebfae8aecc2a181cdc80fcad24e5f816919f5e6d5590504dfbcbb1a80d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 40.0MB
        • SHA256 76fa4d30136173753a76ffbfdddb86d662be870f6af49a779b66bffabffbd4c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 39.6MB
        • SHA256 4d5506e673d7729359e93546160424efeee3ec619143352ba5735a5ad81570a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 38.7MB
        • SHA256 a066c5230ad643882108bde8b188c9589cc65c3fc26b89f73b82a31dde1de8c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 35.8MB
        • SHA256 f5e2ce52a5a257d8e81eb065df89637168eee1be20f97be0606f13d424ab1869
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 40.1MB
        • SHA256 c0955a1c314c1cb2df4d7806a8f2d2cd43ae864f784765f301c2b3f2bad1ba5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 38.5MB
        • SHA256 932af28c7b993051a45b3751cbbc51ad2a440d03b4226a61295d74e8cadcc2c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 38.8MB
        • SHA256 669337cfc4a4207f0b334320c872f22ea734bd0cae5b7add47b887fdffaebb73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 39.4MB
        • SHA256 87a2fa3add03a61d038f262f0aa0b7766fcd04f66f7d31d3bf5b241e750253e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 33.2MB
        • SHA256 e6a7ec1a4a8cf0ea1f96c0a9f82964ffffbbfed0c448b1de9c6bca7de562f880
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 34.8MB
        • SHA256 feb66d971b6536e5662c2033982d75a11f8d72ab4a15391200df7aaef0fb5349
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 37.6MB
        • SHA256 3293160b4ba8322dfe330a7602632b0d2a06a0a0367ee0f769cb27cb320fb484
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 35.6MB
        • SHA256 5e6857cc82b24322eaf67dbfbba8bc134875f06e499fae10ba77391d84c5412a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 37.0MB
        • SHA256 5663ce9d0e1d03db2c7ee5c8ad2392d4811c97f0a2e18dcf1a6aafb66e4499a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 35.6MB
        • SHA256 0f66dec676c21cfcd7fb6019d651fb9a3f5b7973ae06931eee76ed8cc0a3ff70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 35.5MB
        • SHA256 227bb8437564f0a7bfb70079335e4f33de02104c87cbaeb2d0a405214c988187
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 35.2MB
        • SHA256 2b18031584db3ef193efe34eca76d265e220fb434702ab7082981266810dde3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 35.1MB
        • SHA256 1f62de697c5bec5dadfb34ffceffbe28f181c9ff4c42b4f08a23622ad5214a0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 35.8MB
        • SHA256 b55c7fa79983f7eda3854f7d9c33502d948b4ed632cdeb0c8420ae8ba190da58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 37.3MB
        • SHA256 c79fdc567b0de8dc14f4083da756a1884229dee5515ade43ac16fec2dec32c8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 32.1MB
        • SHA256 c1911eb68582c36b1ef342d28fc056dff85172d1d5a28d2f61c9b1f995334326
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 31.4MB
        • SHA256 79e86a66cca3d5bf9d293b5b3b913788251fa8925002d61c99a5a8a8bdc3fc20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 33.7MB
        • SHA256 bc6615b08a7ddf951448878a0b005c18d2f6da18b1476911d96cb7800d16eb14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 34.9MB
        • SHA256 bb71c9940e1792350b40bb3c405802a8cd349216f799da34fba5e3961f8068fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 34.7MB
        • SHA256 021420e9a65560393e592bf004a18d864ab987ff51ac5462f3d3d53de83fafaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 31.8MB
        • SHA256 cb693c0f873b3a63826e7d29aac315e9b455b6807ed3d05460b12df3c5205d21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 30.8MB
        • SHA256 f676c58572d1e963580d059b4a220af323608711baca36c71cc15e2caa86b64d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 33.8MB
        • SHA256 6fcb38b4d8550bd3368cf4351a9fc85e2497b2a5978b8205f48e93a5260cd64a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 33.4MB
        • SHA256 13e16ab36553685e9e07507b14c57e8c2581a8181933d981c8c3eb604c7e9207
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 33.6MB
        • SHA256 b374d9c5843e2a8b487dc6244a85783f8cdcb418b9548f150f9e29bccab8fd47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 30.4MB
        • SHA256 f9fd0015c609a1daf439828877b8cf6d9384c4ddf81b22ce9fd55b85c15602e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 47.1MB
        • SHA256 a4ad17f8f49516692484c7386829a4ce5d9a0cb0284f620b955294ab079edf4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 46.1MB
        • SHA256 698eefa8f7e652e45f8666bfbc3ea5561ffadc90e152647126534e163a028e4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 47.3MB
        • SHA256 570447adf0e7220d2880de292c7ccfa909bf773095e3e0095027952d7612ad24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 42.3MB
        • SHA256 f68d080d9f86348ecc4b33a218de560b3b07f1a41f4f702a273dbc63c1284ff4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download