Overview

overview

8

Static

static

3

2026-08-04...as.exe

windows10-2004-x64

8

2026-08-04...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    36s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 23:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_0172d12a5abc32c0af5712976e18a352_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 26.6MB
  • Sample260804-3f7f7afr2x
  • SHA256 562e8d8081df56bae6996f39037bc56e23a5786550f1409ff9be169f3f9bd708
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_0172d12a5abc32c0af5712976e18a352_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_0172d12a5abc32c0af5712976e18a352_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1212
  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_0172d12a5abc32c0af5712976e18a352_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-04_0172d12a5abc32c0af5712976e18a352_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1492

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 26.6MB
        • SHA256 562e8d8081df56bae6996f39037bc56e23a5786550f1409ff9be169f3f9bd708
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 26.6MB
        • SHA256 76a45d8b39e3d1c21b101aa0be5c42d8503038faaf705a9803882fc707b2e785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 53.4MB
        • SHA256 daf4d3bd7ac8411ba60319450007f02ea8c9db55c2309b9b14618e5e89c7d186
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 53.5MB
        • SHA256 215427871e19b974ecabc6daf62359b39b5933b211197881d2750287b0af3dbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 53.2MB
        • SHA256 a35c8070412b505c9840cdfb7be20109ce6f0fdfe2b9bbeaa1b14ac99a8f5802
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 46.4MB
        • SHA256 6a1236070f9505715ee32427cd89ddb4972be8e782b06d68b3b5081666d3d064
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 45.2MB
        • SHA256 5652a86383a9dcd965e50d5e3f0007421a3b1d261aa854724a7af5a03f413536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 28.3MB
        • SHA256 a1f95059ce15ab28e284d31ac30988ba96234649d89104bd5f6237a9fd9242c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 28.8MB
        • SHA256 b4c691cc885afb3cbedea7e5cf80eaea10a75a32ea6c27658a06b1705b7687e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 45.2MB
        • SHA256 e320716fe2a9113456958965b7e6744807c11a5946c76c752fe92bd6c79dae69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 41.4MB
        • SHA256 cbee8dc2365bf1819e395ab7fd14e94e20c29bd1f40d18a553150b29dac0e3c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 37.8MB
        • SHA256 03d53c8a6378eb2fff72c3b88958125cb2c0ccd3bfe19c490a588ba090d592f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 40.2MB
        • SHA256 f3c0295c1f60e8cad5a2aafdf0b01219b5d9fb081cda24119dc44340456c4ea5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 39.9MB
        • SHA256 0cf9bb05f46ea5401975b60a677fbec44eac3f82b2e369b9650968bd24a9a58b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 39.9MB
        • SHA256 e28dbb367b0d7c46b55c923f965113ef7c45d7e7cc5fe96763fc3429693d7b1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 39.8MB
        • SHA256 24a9be10c50cf276762f0bcb7b2d172acfd6fb42500c25921a51c17b183d7170
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 39.6MB
        • SHA256 da065ee95051f0228b3bd93c5751b6c4fecc190fdca17b3f617348989c505bd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 39.3MB
        • SHA256 f2c87aa150b9611683e335856e291c2e86f10c44c8d5bc938e8bf5a5bd8f2e50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 39.2MB
        • SHA256 de30164c9d183c4396307139af0c7292a1fd5fd63734b898873a7a4f2f0955a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 39.1MB
        • SHA256 ad73d3418a34425348abe00014912351dd63fb0c3e22b41a32bf9bade47d1c93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 39.4MB
        • SHA256 dc9fb77421fa49cb79325b9e8786d45379e2b55306223ef57ce66ceea604c07c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 38.9MB
        • SHA256 2e2e003a2852f2cfadebbe733d1b3608f1b37a1c5fd7b6b268e01a21857d161b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 38.7MB
        • SHA256 20398343809962d51bdcdbbc69d1beb61ca6c1ba95a6133c42faed9a4cf5066e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 38.4MB
        • SHA256 cd36b2390ed4d6a22846ce5f0e84974ffd4dab8999033c98cbdc0e0313059e95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 38.6MB
        • SHA256 33962a6375e38772867e362006015ebea0d37744a7e9dd66a8ca21842eacb024
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 38.3MB
        • SHA256 d119eea4605cef4d98944c935d4467b4e734a686e659322d46fc1d54649c44f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 38.1MB
        • SHA256 741127152ba2fd5afe4851aa76c82f4b4f339563a36ae9f6bde6f4ad11be4174
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 37.9MB
        • SHA256 e24a71742f69e8d93e4bbb21cbfab8fc830db787876c8ac7df49d8ce6f6415c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 36.4MB
        • SHA256 cca83eb01d279bdba7dda3466bfe129705f4e32b2357b108b74769aac8eb5aea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 37.5MB
        • SHA256 01b1117e1bf5330403dc7eef3e475d76b7047ff4c7efdf077b5e4a5f991a03c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 37.4MB
        • SHA256 ecf42c25029a36331752e45ca05727d050c8634314aad3776e993f90391b3a72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 31.4MB
        • SHA256 59aa3cf62d0b2b7af39ba8f607f37a06be87834550bc2707affee6488e8f4a3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 34.8MB
        • SHA256 6de3f950791081d77aa70a40081877787d95e5d1ac7bf7378794991657479c34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 34.2MB
        • SHA256 e59911f1521226486899e118d67545272eb8753e3f2ddb1fc7bc7a87ed3aa710
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 33.8MB
        • SHA256 03d0c9ee101f8f713f745402d0b3f8a6cf1f32ca6f2ffc8f3ae7bc146b49d492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 33.4MB
        • SHA256 216508bafa60678c84cc9b2f59bf536d37f6c396de84165c5db1775eaa4aea62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 32.2MB
        • SHA256 53cfea6be5a93aa78d32c9b069df41c7bcce3ab77cafe6d7c05e5866bf0d4908
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 31.7MB
        • SHA256 bb9a2134fd5f458a018f827fb50cc95b418bb68b1d9e4793ca1d8f0c740f2a26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 31.7MB
        • SHA256 decfeaeda767f0081907a4ebbbd459c04d379b6bcee6a1f20b90124ccce544ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 31.6MB
        • SHA256 7d03c88c210a59f435cb910ce76865485a72cdf32f92350c5dd807453cde80d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 31.5MB
        • SHA256 b4cb5545e8725674a7ffb12f2935ab0510484ed3d2cb0ddcff2502da7b0ced48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 31.3MB
        • SHA256 91460b1ad252e8345a4e62209a2352eedc4ad03b9c93ae7e5e0e601e141be8d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 31.2MB
        • SHA256 b3b860de3917529eb79e7fc74389acc28eb3a19b2df80621da5f5446f31ad5fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 31.1MB
        • SHA256 88c0a06aee16f8b086eb3ea872a4cd1f98dcbd86929598b3a81dd5c6fe1dc103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 31.1MB
        • SHA256 8406797b8129027de1277eed5d853a76912d7d20027eb610158a0dd3e38debe6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 30.9MB
        • SHA256 71491545621cebe1a4e451acddcd80ab8e1fa90a80a569488e7d9c4dde1c2064
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 30.7MB
        • SHA256 762e2d6a79c78ec7ec4591c0283e0a2c6d6636b5185330f959fa369d3fed49c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 26.7MB
        • SHA256 f306a902959e7b3a85c05ca47719209088d0ac66433b66ddf30ad4af99bb2c3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 30.3MB
        • SHA256 ea3612495c7a0c4ac0cdba00eeb8a2f7d43c56ed2786608401bfddcba407a0eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 29.6MB
        • SHA256 4ea33dd98ea0b0486f30d40ddde031ac5a206af9eafe763fdcef00605d02eca5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 29.1MB
        • SHA256 f75451b256e4443ec13b5ed400f70235ca5e3f02f302646c06afe768422fdaba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 53.3MB
        • SHA256 e853d5ef17a0ee55ba8e5e6d9e19f0c47bcacb9d442b9994acdfcaa53d24cf14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 53.2MB
        • SHA256 d04e972d2bc3b8dea40be6b2e34d36ccdc6fcc480cf204867d44a4fa95c037b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 53.2MB
        • SHA256 658f8b59a6da084684e25c40cb77b126dd6fe733138e940e9251d5300ff6cc0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download