Overview

overview

8

Static

static

3

2026-08-03...kl.exe

windows10-2004-x64

8

2026-08-03...kl.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    26s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 10:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_8a9d3e933c2099a11a95b735b39bfe62_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
  • Size 31.0MB
  • Sample260804-m1636aybnh
  • SHA256 2e6e8c01b6476560a47e7a2fb8c6004eb9a58bd6622851e02a69ec732a59169f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_8a9d3e933c2099a11a95b735b39bfe62_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_8a9d3e933c2099a11a95b735b39bfe62_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4200
  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_8a9d3e933c2099a11a95b735b39bfe62_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-03_8a9d3e933c2099a11a95b735b39bfe62_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2812

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 31.0MB
        • SHA256 2eeb1a9089d5444c6e3405bcce943cd44bf5ac51779e20819157aca6be8e0ae9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 66.1MB
        • SHA256 2d6de5a1c11b17ec50952fed0e912fe642dcfb2b18b29dbb2659dc29e0f7e7ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 33.1MB
        • SHA256 07448dbebb20318675e35c212ae60dfab81323c7da2314a1818d015cc0d3bcfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 59.3MB
        • SHA256 2757f7b3e24dfa807be1ca5d8207e38188409c273c93bc497cda9b4419fa08ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 58.1MB
        • SHA256 377448d16670ce96a416e21322ea578d6e06dfa5ba0ac5a31f14aba3e975cd9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 62.2MB
        • SHA256 56cbae2b5edf18b1d025532ed4d9c97601ab3a2134a352124a042ac961f531e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 56.0MB
        • SHA256 ddf70144306bf68ac48cf3ff32647e060dae7fc1c09f8bd1fcc6449633942ddf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 55.8MB
        • SHA256 c4d1105ed8e7a4d6b8a0aaff01dac804829d21392e5952910fbf369da3e6a99f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 56.6MB
        • SHA256 55dc6b75d54f992ff26111e3f2447381b29d177a7bfdaf76072efbc330094ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 54.2MB
        • SHA256 86965de377bc5403be8fa482282da8e3fa4f4b86531934433da5d446a7399557
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 53.8MB
        • SHA256 09fef7a883f9479f7fa9df33a093f3448aa1b874e21a19c4142cf6ecb614a06d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 54.7MB
        • SHA256 a703f52bacc35f787007c3ad95f92e4a172b1e8cc24d061a7a2322ee22622255
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 53.1MB
        • SHA256 14b5cfb78b4d77ed5c563552e829cb0574362f752539939f73ccd56425dbb17f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 52.6MB
        • SHA256 134558fa010ef92718ea05c0a2fbf4e9551aadbba37a7d6628055f823bf41bf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 31.0MB
        • SHA256 71fe3454ba0ce50f48fc02e906d2d3cfe2af6dcf87a06fbf53c6a2da3970a58e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 49.5MB
        • SHA256 f2b9b072113335c04b8bc16dcc776fd7b6d6ebbbd839440150cbe85b157b55cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 48.6MB
        • SHA256 a6ac0cdef04bfcdfdaa492ba43edfc7598417e331926f25373afe9316106f3d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 47.9MB
        • SHA256 89ac653ba844566c6f30f830255824b5ecbe08baecfb9b01f4eee0196a62b1a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 46.0MB
        • SHA256 8a05d279aeb9a6c86a03ae83709fcc660ea572d0130c41e4db02a048d2d01651
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 45.5MB
        • SHA256 8f9e3475753133276f6ff845dc693b4caaa2de51a39fcfdd954c6b5178b8f6e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 44.8MB
        • SHA256 66493977a370177d77692fb3943f9866edea891b6c80d1218a017abdddac9e9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 640KB
        • SHA256 36e46251acaa3c1f6ddca77a7802721efdce2c29bd1eb6d91a02a5f772f39704
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 42.8MB
        • SHA256 59ef4858cd311ed95dc668da099a3ab94313c1b13508d8a444cb6676c3e6d9cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 41.4MB
        • SHA256 3ffdadcccda6609b647bbb24fc1904d3a8a0133c7a5db36e60360259cdf88be2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 40.4MB
        • SHA256 e66fd83077750346a3ea60b96e69cc5369fb2d12c1590ecafe11174ab285d587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 39.6MB
        • SHA256 567bfc8643beeed9208c7dc7d7e798f8b8010beeb29cf395c12ac085ab879a21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 39.3MB
        • SHA256 2dcaab956121574ebd96ef02a9cbf1f1e2c215b520519d7b198b19462625b731
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 39.2MB
        • SHA256 99498a98c416108d7b6b5a0bd9f8bc1c920b5199b0e3e5c27bdb32e97d4ef309
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 39.1MB
        • SHA256 918de2afb3a03f5dd3803b6a57abdd9a2bf2ebe98ec84e52866df09397d73eef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 38.9MB
        • SHA256 2aa0c0648c61d0cb4155439c6e3e428a8002b8b65de304f5130fe133ecb72a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 38.9MB
        • SHA256 dad657279be8d6b4958bdb426006aa16fe3b2bb80a5fc922937baf3335b0bdc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 38.8MB
        • SHA256 d3c07c77d8de7d0b1d9713d2eca9491115bcc2ca308a284abdcf168fb6d06720
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 38.6MB
        • SHA256 4eea22bc7773e0f500d7ec41ba3df4e0bb9002cbe2cf078096766bc01329ecfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 38.3MB
        • SHA256 2f7989df6080fc3efa26aadd343a2b4bf11dab08d8bdad21439a7ca198317322
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 38.4MB
        • SHA256 dffd7ea80a32bce059ebf648d7a1cee6c4f6a48174438941abcacde177011bd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 38.1MB
        • SHA256 fbba5a5a35003c31cd653d5b78aec3d9ae226a77603736554c81804183d422ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 37.9MB
        • SHA256 3b38047f77e5634a608e9bc2a2367c8000abee1c08e6dbc92d35178fafecb40a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 37.8MB
        • SHA256 6720c1e82199516eaa01e3e2b55b76d96ddb7696d2d8302baf11ee492f2c0f49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 62.1MB
        • SHA256 abda7fa4d4884571cb520ff2f8060b88e7fcd27c01ff0f6252e4059b52352610
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 62.0MB
        • SHA256 a268ee710e01d88b6d996e5b91747e16b0d063c0e57f3aa4a76dc6fc680326ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download