Overview

overview

8

Static

static

3

2026-08-04...as.exe

windows10-2004-x64

8

2026-08-04...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    122s
  • max time network
    118s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 22:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 49.2MB
  • Sample260804-1y5n7seq5x
  • SHA256 8f7078a42e6596a10802c5410631e7c2691027084fe2229726d302b7321b6871
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4304
  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5760

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 49.2MB
        • SHA256 8f7078a42e6596a10802c5410631e7c2691027084fe2229726d302b7321b6871
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 53.1MB
        • SHA256 c438e82f2aec2821c13acef942d01b984ade5baa6183b0a71327f8f482fa1c30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 50.6MB
        • SHA256 12318b45d8a12a4b09bc57463376499156c8e48c31be046035cabc6fcfb686b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 50.2MB
        • SHA256 368d51f9fa3e892b767b59fa59ec37e17a964104e66c665bf96431c639e7cd53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 45.8MB
        • SHA256 c0f76dac7defb2de1097f14909a7d2dcb12ac69dc8e451e2f0bbfe50b2ed4771
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 45.5MB
        • SHA256 4a65436e9067d31c5c3f6340fb7b6f6478be54cf80680450bad81b12ac71b0cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 45.0MB
        • SHA256 e71c3089d2ab507789d68d2eebe3910e7ab950d50d3c98f628fca4a1f7cd2ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 43.9MB
        • SHA256 c6a21359f0646c0813b34aa1a3beb4fd0434220765708e65e3482da7b1b8d475
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 896KB
        • SHA256 86c9acf18888181788a8d3f1ad398f18fd0c48307298995d4a30f4a8852564cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 41.6MB
        • SHA256 85aca1a43d9843675510be7372292e5c0f048ba85991b30e951c121bef0f5173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 39.3MB
        • SHA256 ac68e624aa51bf75a207aca87127717874f0c3f5760d70e0b0cb11617ae11552
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 38.6MB
        • SHA256 71ba015837259e6ddf4694486a48424d95500b26edb8ded718a7e960a9421051
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 36.5MB
        • SHA256 24d3a54315fc5c84e34167952aa955c90b88232a6a26ea8546c9d7f2a7aea2c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 34.7MB
        • SHA256 ccf7154ccbc99d5b13b3b4a8411ad877a766435293af6c845359ff8e253e3f9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.6MB
        • SHA256 82d741b702d7cab2e53accfd0f8d4a769ab84e5940630d997f78de8de629d5d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 31.2MB
        • SHA256 5bf397e85ee7697929b386e57e4278e43545c62b0241658d3485b3c5f59cc091
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 31.9MB
        • SHA256 0c7598fa472df4b3e6a2aa6447de30cf0adb6c3a77aafe2fb8f4cf148ce1f55e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 31.0MB
        • SHA256 a79def5e09768288ef700f60d79d41e9a16ad4106fb5e9c3da22d4ca9bdd312e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 28.6MB
        • SHA256 81c395fa4115202ced6fcbf852edd906b730ea432af17bdc7367263266c6d1ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 30.2MB
        • SHA256 a4c3b39bd473a43543807a5c7846281fe87baf254d6e4b8e06d30c37993a6e09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 29.4MB
        • SHA256 7ce82fbfcc3d911a585e4cab502ce4efb1fec1bd04b17c911d6e5ac0ea772224
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.9MB
        • SHA256 97258aa182017ff488f0073424c45ee6d1187e273b729cc7eeafc3d8042e774b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 25.2MB
        • SHA256 60f14a727e8b7d993d06e9fe90b0ea9ea01fb538f21ef9313267fd587fc98b83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 25.7MB
        • SHA256 a8c74e6215817a400730ca72a4196eb12c992dbd197e3bf1a6e5e627a1939d58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 24.0MB
        • SHA256 b865c2d2923f7a689827af815f52092c03df2df81b72a8777005f5f567bec32f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 23.1MB
        • SHA256 6d87e18382d14d384905eab966e411df17f7f95d619509737cbcb846e56d0beb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 21.9MB
        • SHA256 327393c94e996d8b3448db68ae39a445fef0e0b8ce93f28ecfc85d7a92060a41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 22.8MB
        • SHA256 bb6a6e618af539fdcb0bac538ef15b9c7f96fe0ef956f83b850d2507bfe466a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 23.8MB
        • SHA256 3dea0540493e612ddf2e1dfac07101c66e7794798e2df3e00e66b793b88bf333
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 22.2MB
        • SHA256 a2eac018636c08b82887a9dfb608ff71ca1568805117447f2ea9485daff9d5e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 20.8MB
        • SHA256 3ddcda9ec3fa7ebaac1285eb900e65bf45cb14a0cf596fb4d122465e047664bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 22.6MB
        • SHA256 1513299c3692e155e893b13f810e372702e65c98854a0fc7e32ea70bc3d07f3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 22.2MB
        • SHA256 0590077ecf2bea88e4c93dffa1e5516954b697f91298e6eb61d7150d742e7df8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 21.4MB
        • SHA256 d93215fd0e277f287ca9e53f728c41cee3d050665bd6251f11e4c0768e4799dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 21.7MB
        • SHA256 ed1ffa03ee09d9c64034d25a2c8f08bce9384092b23d4acdab4d688602e0e1ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 21.3MB
        • SHA256 1ecf2cb42996fba5688c0c5c1ed751e6bb34ce8052af07ed60ddc8d12a3b3e91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 21.2MB
        • SHA256 bf0a1f93c7512bbed67bced44d624e37c60a7c15efc812f03e85ea213dd20f23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 21.6MB
        • SHA256 e421d744fa24580094bf60745f9ddaef228e0e0bfc6f94776fb68b7c12addcdc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 20.6MB
        • SHA256 4197ff7f0b6a63d48360695b2180243b648c2e8d518742212a159bdd0f5bf0cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 20.8MB
        • SHA256 0b08cc2c12f32a05e99056cc994c85a28b1a07aa4cda57b94a835042daa3e15c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 21.9MB
        • SHA256 6c541adf019af19c6b9233ccf4ca3982d20ac509f56cf80f78494b121cf8d8cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 21.1MB
        • SHA256 6f0af298464810937c3f4cce767bc5617b3b1efb2c4fc3bbc1bc70c86f00dfb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 19.8MB
        • SHA256 5f1fc46a5d73fd5fe258d34d775223148e70f3da0c94c6a813015675896b7728
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 19.0MB
        • SHA256 2955ae60b322ef2eb3bf8c569267203c757f0e3aa15e9b39388f64315ba43f50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 19.6MB
        • SHA256 0a9969f973cca4c00530ed2e04ba7fa20416ec4b7ee1de395749b3a5da2bf0ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 18.6MB
        • SHA256 10dc24e0092aabc9f4cfe340fb7c781be39997319c0fc632b3016811311f5797
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 18.2MB
        • SHA256 5561b7eb3386630620a1f59d767a681290c7004a3d2c53cbb233ff02ebfae36c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 18.1MB
        • SHA256 2607f1f07d3a521f29c4fae3779acd8c73d70762f23a0fe0a4ccbf029cee513d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 17.4MB
        • SHA256 519ec21c2c8697662bbe05167e834f2910de2596c973fb7a4aeb6fe8d41d79ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 19.2MB
        • SHA256 adb14c58aeafbb3c4470000c6d3d19649403109558292d515d518ae02945c9f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 17.1MB
        • SHA256 e4806e2b72f1786da60f64b1d842585aaa2bf498f15a542d6185a236a2886084
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 16.8MB
        • SHA256 829fc1857a95ab6785299283f8d3f8d75fb4b0c7cec1111733a46886d3f8c580
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 17.0MB
        • SHA256 72df97620e7f971a10485f2f027330a68dbd8f09314e1528baad7a2618da6dd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 16.1MB
        • SHA256 e5bea1972692c9963f6f42786b02c522c635a4ba82ea08a7bdbc4bcf2a715d2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 15.9MB
        • SHA256 941da6ec9089eadef4abf40a56ceefbc33cd5522fa4e193e0418156b2f303a1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 14.9MB
        • SHA256 b17fa66f51f67df1d60aee0da7a9d36f7d5e3e206f42d61fb1d5a659f46c051b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 15.8MB
        • SHA256 de2aaf79dce23caec00a48dcadc3d0a778ccd50bc75d211fb2f31274bc82068e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 15.0MB
        • SHA256 79d24514b08b3a547320f05dabc1b80cf4d54d222d847d89191822d72a20299b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 14.4MB
        • SHA256 04a44e2564203009bb35e85ff8f224916a2309e36c8ff996157f836200adfbbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe
        • Size 14.8MB
        • SHA256 cd690a524d811ca4cede3f0d7a27f795fd84277730f5d5b6a8f7baabeaa5e0a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download