Overview

overview

8

Static

static

3

2026-08-04...as.exe

windows10-2004-x64

8

2026-08-04...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    69s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 22:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_b4ab8ad13fffa9765f18c96162a16018_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 27.8MB
  • Sample260804-2cd5sszscv
  • SHA256 4d2314ba2e4d9e5ee23a7a393a3223443a4150d4b0b491d5f973090f67008e8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_b4ab8ad13fffa9765f18c96162a16018_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_b4ab8ad13fffa9765f18c96162a16018_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4984
  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_b4ab8ad13fffa9765f18c96162a16018_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-04_b4ab8ad13fffa9765f18c96162a16018_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 28.5MB
        • SHA256 7499f1821e054c22d8bfb2b6c640c68be770f8f3169774c66696ca7197696c70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 30.0MB
        • SHA256 789ff850c7194075ade3ee13cd526e64dd424179703c333bbb6cf8622c2a3e41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 27.9MB
        • SHA256 5bddd4318143c1d7de64cbb7209334f4bc6505115c20db7f6c48b7e24dd49bc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 27.9MB
        • SHA256 aa4928652e8549bf45c6bd26af51fd419e1ce070b1bc5e97b6611f8c5eae79dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 36.4MB
        • SHA256 e2d66009ddff67799a3bcedb4300d5baedb3422b84ce9705277f0b61d38da40c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 39.0MB
        • SHA256 9f58745f708ab4c4e2bfcbb9e4c49c703b84c91a76d51857e7658654106a9c66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 37.9MB
        • SHA256 5fae61d5d2d31dd72f481da9f013e39e84929343ae4e6ad56388982fd5d1aad7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 38.5MB
        • SHA256 13e154ad2f6ae1518838c2dd64ec47dfb659b5999220d07c3e953db4840b929a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 33.7MB
        • SHA256 56fbdb066462d8e119a484beab2cff401569a55f515ee5f192bbdea08622e6ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 36.6MB
        • SHA256 e7157b2c0ebd2936826d8ca62d2c58e5853cd866b4e85e2f6669d8383265d2c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.4MB
        • SHA256 aab86d96a0bfa021cd0687028272f50dd8f6b43365b5155dfa6e7c494c4aa788
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 32.8MB
        • SHA256 05862505164cc172f640576eafbbb578b0979019d6f0209d178008aa07f1391a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 34.2MB
        • SHA256 9f341ef4b72a5c50b71388679ce29dd4bf5e02b47dfd5601e877f3196058e2ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.8MB
        • SHA256 c301be2c64b141caed5575c6545721992d3b415827d2ea6e29deffed79005493
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 34.4MB
        • SHA256 41469aaeb20cd7e46775f40e9fed3b5a3076738962ad0ab99f8d463c8888e054
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 32.7MB
        • SHA256 27e2e3dc4f8d174f0d8009ef58c8a0e0193d2ab51787f7e422ef787e728b3b86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 34.0MB
        • SHA256 241b2ebf021beca81652e8e54133eb296140aff32a0a50002a3c674dd94d4c55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.8MB
        • SHA256 5e43403853e758dfef5efc655802ab1a6ed6e621368f6e5e8095c1cbbb06d60b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 30.1MB
        • SHA256 1d0b442616accb263c72266b9a37ce729bda0802a88f33c31b4735e1889b8bd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 32.0MB
        • SHA256 352c95fed14a85355978a2c442c31db47bfebaf985cf017493c9f54932ecc368
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.9MB
        • SHA256 2a9484e245f709febb6cd323e21ee538beef317fa4030dd3d3d608ac9a31646c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 30.2MB
        • SHA256 0b973e1f4135a509d5cbcac84e460b618ea92cf0cbe221b4a3202a10a5b6984b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 28.4MB
        • SHA256 8f7000b1058e76713c14b969c2524f947d4d18fe6e796076cf778ac873a46416
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 29.4MB
        • SHA256 3d0a53f235a430c8a041b42ecfafe30c76c604b25971aae0732ce5736ca4b4b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 30.5MB
        • SHA256 e8c7c9495fc7eb6b7a6b64ef3b6096d8bd3c5155741b3e94ae46566558a74d13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 28.1MB
        • SHA256 4530a73f11add9a39f2540f9a0a1b37f09626d8292a84d041ac46dff94a1c3b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 31.7MB
        • SHA256 209132c80fceeb0966edf495fb00bba97582184be92d774371c372d5e3ebdc20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 28.0MB
        • SHA256 8ff45b99b3adea4a1ea9d71650e77bbe44fc5e0bdca55cf550afac4a53ad3f98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 28.3MB
        • SHA256 eb5acfcdceab94c6464c41931305a67e174c4cc3c4e20ce881945dae32d215bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 28.5MB
        • SHA256 676d662e86e4cb0ab2a455f295c4e207e99d8d90df75d801c862bf0efaf8fd5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 26.2MB
        • SHA256 13a1290da35015023a3416f5de831342a372ec86b0c2c5b7a98022112bfea16e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 26.1MB
        • SHA256 23b6d290a4ce4fecea2b3e1ea000e20633954fb40881d344f3d4ae19fe1bf3c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 25.4MB
        • SHA256 51a8d0bb54b9009a32d63ffe880e01839a839fcfc6c73597d36b2247e48786e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 26.3MB
        • SHA256 5aa482aacf29b3f8df66c0d88da6bde5ddd0ba61a98a29d883457fbb4d371f08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 25.6MB
        • SHA256 049d92cc36c2e5bec17517e5c73735b34339cd7a0a75da335e21d992d7745c8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 25.9MB
        • SHA256 c8011ca030752abc361e35d9ea43e9f68a11532b34d404b974b3b9746e2016cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 25.4MB
        • SHA256 d25fa7353d4c48bc3a03d60cc7509f6c4385a160e938b4bdd524b5d9a71faaaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 22.8MB
        • SHA256 ddfeed141472bb51c4dcb6543046bc351bc3b2ccfef134544815cdc3ed284183
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 23.9MB
        • SHA256 873000899c90d967cfa125253d1ab48a5d40807d1afb303f2b6277b7905d9e36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 24.2MB
        • SHA256 85fa02a4c35976bbde4f406efa883924b8fa85d9f5e89246f109d837e430545c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 24.1MB
        • SHA256 7c6f3197503508ff4aaa7d0122dd63e84175b745d228d38a3c94db571680ad1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 24.3MB
        • SHA256 c3960e1184ffc34f9cc2a91fc66be228e3aba1fe8ac7b7eabaf96d1e51b4c54c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 23.8MB
        • SHA256 1f82edcb45692f18b8a241f2e6c07dcfb474b120e1958561cef42eea74e375e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 23.9MB
        • SHA256 0832211ef87b99f1cc2d1cc14a11c03a53684463f9e3cab665fada20fc919de1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 23.4MB
        • SHA256 b15dde86245492fbad8fc8010d549b8b616d646784d50260aeecabe26dd69865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 25.2MB
        • SHA256 4bde489f99b61da9497c662cace42d13955fb6c82270578961b62fef311c7b3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 22.2MB
        • SHA256 7698dc5be7da0b06b9a58c2ca2d6c28d805a155b042d369fb95053322a7d8e66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 24.2MB
        • SHA256 ec80685ce2a6ef824b855b4edd85a860df397b615fc1fd63ce0ce9abbd1b7a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 23.1MB
        • SHA256 af2eb9d482459c69902daf395a72dd5c8c6ba685ac49b6db155c46178a412a08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 25.1MB
        • SHA256 2d2ea958f3e309499386965b030fea4169471910051e6bb47783bbad109c5bfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 22.8MB
        • SHA256 727d2cd05397c5acc1c39334ad18bcf190cef821add28f445580d623c2d2d716
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 24.8MB
        • SHA256 359da722189692985661cb15de2cf81b39fc9511cc6010765cb9fd07debcebfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 24.8MB
        • SHA256 78d560d2d7e9af7c5abd6390c439b0282e619ee41dfda5add62fe39736715b82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 25.9MB
        • SHA256 7e4f3dc13e5039fedd4545d9e44dca05440debda2cf6f06266faa4b076485279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 23.7MB
        • SHA256 f9b65e3478574aef81a68f19b04271afbe4277cdc7a147f8d1583e4601684380
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 27.8MB
        • SHA256 4d2314ba2e4d9e5ee23a7a393a3223443a4150d4b0b491d5f973090f67008e8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download