Overview

overview

8

Static

static

3

2026-08-04...as.exe

windows10-2004-x64

8

2026-08-04...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    134s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 22:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 49.2MB
  • Sample260804-1y5n7seq5x
  • SHA256 8f7078a42e6596a10802c5410631e7c2691027084fe2229726d302b7321b6871
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4792
  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4352

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 49.8MB
        • SHA256 febf45c6c273467e94eda004f95e189123b21262fa036df621de3a66720398b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 50.9MB
        • SHA256 273eeea720a4625258dc0339a5884e1b8ea05aecc49add2fe200cb717d8a0fb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 52.6MB
        • SHA256 e65f908766a2919fb6a5fdca2eaacf8e7a5999e190127f5c4e9e787e6408577c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 52.2MB
        • SHA256 01f7ca7d749bb9591d979fabf1f1ddce590d22f8ac858c827fc5a3a8dc7c249c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 98.3MB
        • SHA256 cd8c6a6d629a1a1ff74652ec575993fc11c03b041053ad7a4ee616c277c39d87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 98.3MB
        • SHA256 75465ecd66a993b35435c17ca6686060a499fc77ae72d282b79675f6cd945490
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 98.3MB
        • SHA256 0f3f1b1e49ba7a581c6a50b92e5f3481ab78b86a0b2e73d49c48b4c6a7737c64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 98.4MB
        • SHA256 7b19833bceb92fb775c858da42f5091e3ea6326a0224d683b645cb6412cfcc33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 98.3MB
        • SHA256 de9173d48c66fc3baf52f5d3b07f77a5f24fda4437832104fad2b53a955341d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 98.3MB
        • SHA256 568d2058857f7d29ae4d1926bd310beb4c620c7cd54cfd264241e2b08ce8edee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 98.3MB
        • SHA256 fefdfd46814744cf8c73b31d23c4ad84e207882918905b06ccde9b426d555ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 98.6MB
        • SHA256 a58fb427cd0ff8f4406294c90e3b1c7bedb2b3e33f93dd01eb77ec9c0ed4b263
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 98.3MB
        • SHA256 7266053aad51f5982a0679559e0aab0d27715cc1eab66a4489d3b78171e537f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 49.2MB
        • SHA256 e3771167aa28b26c7db888d49132a12d6642e92504cc0e765abfcb99e609554e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 52.2MB
        • SHA256 7d35c7a7db7d294a8256769c7a0ec45f5c22c34f14c7e186ca01497fca8ee753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 51.5MB
        • SHA256 d5b7b03e6d0fffb071d45b578deb9abd586e7a701fd9db2a3aaddc03e094bdd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 37.6MB
        • SHA256 145c26d48184f742e40d0469e4cc715af2fe478570d68ab14b0e5eb6fc8c5d82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 29.8MB
        • SHA256 c9dd0d2435c87ec2297c2dcd91517c8cacfe4b89ee44c7e56e19f20303d556ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 28.8MB
        • SHA256 0a0fc67f50af291fe1229fdcd9c1962f3c1fc2879109877b7d79bdb3d8447299
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 28.5MB
        • SHA256 12a57e5661a7f73ac550131913a0ab914f34123711e36ff7283fc84b03695d56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 26.9MB
        • SHA256 c6d57af97fa3a463c1379a9dac1ab0cc4677ae658c0739adad9bbe8a33715580
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 24.4MB
        • SHA256 090c3d372aec3f836e02c6f14c0aafd892de1f8529c0400b4b3d2f4aa5bbb4c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 24.0MB
        • SHA256 b865c2d2923f7a689827af815f52092c03df2df81b72a8777005f5f567bec32f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 23.4MB
        • SHA256 40b49af31884793c2ed68de2ec33d5f0cb8d5f0cf2701b1420fc61c8d9a9353a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 19.7MB
        • SHA256 7f93e4986e61a78b4f788047993d150e04baef96542da176433dfee86d31b17b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 19.4MB
        • SHA256 c176b0c492a4f128a74f38477fff94931beec508f326f0c8d735c534dca3b1ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 17.6MB
        • SHA256 383150adc8847e5b986c35a13a2c3067217a8dba7f93dc72be507c4458f6990c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 49.2MB
        • SHA256 8f7078a42e6596a10802c5410631e7c2691027084fe2229726d302b7321b6871
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download