Overview

overview

8

Static

static

3

2026-08-03...kl.exe

windows10-2004-x64

8

2026-08-03...kl.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    28s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 11:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_8624312dddfc1c0d4c6ccea38c707a1e_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
  • Size 18.1MB
  • Sample260804-m4sd6sdk6z
  • SHA256 3ec73de0f835d6b455bfc779325fc8ddc27642247d9e7cf19b50eb07290da94e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_8624312dddfc1c0d4c6ccea38c707a1e_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_8624312dddfc1c0d4c6ccea38c707a1e_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3200
  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_8624312dddfc1c0d4c6ccea38c707a1e_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-03_8624312dddfc1c0d4c6ccea38c707a1e_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3076

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 19.1MB
        • SHA256 062ae82588ac6cefa55a08047e7c67070df4675fb87ab853ea0d32765f814583
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 18.1MB
        • SHA256 3ec73de0f835d6b455bfc779325fc8ddc27642247d9e7cf19b50eb07290da94e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 18.1MB
        • SHA256 4984712e810aad50853cbf78b2204276c30c36f23454ee16cef0abf3d3a580ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 36.5MB
        • SHA256 453acf7b12d9fd80ef6c5ac697dfbf15191dfb50ff91bcad396aa3ecc830c7de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 36.3MB
        • SHA256 44a2e1c1f341776dfa20c97809445fc04f05e9e5fcb93a3377e6b8b856971e6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 40.4MB
        • SHA256 a40875af24511b1b3a5c5c7be7cd0fefd8937a864b627ca6a08bfaddf5d38afa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 36.6MB
        • SHA256 4989c5f7d78726f8112483f5315477de1405d1e8f17ef9abe161270fe42baef3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 43.9MB
        • SHA256 e17cbccfa32e4fab4338637a662ff710322335b1a939eae72f43aa8ad84ffcfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 38.4MB
        • SHA256 298aae5444f88b37cb72882878f5cbbed237ea6eee5c1b52765adfadc298d0d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 40.8MB
        • SHA256 80a0c9c907bbabe3e0a39215a5733ee42f41bbb4fc74f7bc4a1417632ced866e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 39.7MB
        • SHA256 42173f544fb992c66afb4b4a661bb5a93ebdfa6b213e2a66c12034d25694e49e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 38.5MB
        • SHA256 c068a8c04d580d8d16cb6c5c0c1bac496e4db87ffa91dfa8077521db1523ddcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 36.5MB
        • SHA256 776509149d2d0969511b299c78d48b6313be3b4ab93bda658382f33f9d67f3f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 37.6MB
        • SHA256 6445153513c4670137aa5c7bae34e67c8f261d4313d717b9a8542d66a48ac009
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 33.6MB
        • SHA256 b9602528434fcb5fd1d2dee03d07863e3da19ca988a0e1134b8bc8b958744856
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 36.0MB
        • SHA256 7c2133ed458bb34aa44fcb98ddff88ec8c5636eb1e6c7eb5bc52c4b2ef9f68df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 32.2MB
        • SHA256 7b69b495a6d3e1941ef6cc8f00aa0c744f83d5203c7a6254b8cd30a07679e89b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 35.7MB
        • SHA256 7b2300c2b217721614564179aa236a2d31911e60f6e8f0bb07773c20943e0140
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 36.3MB
        • SHA256 37d71ddfed99ca4ab996467f1d4001a7da6c6027da4b6013d9f9eb2d75786382
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 35.1MB
        • SHA256 c89f30e589fdb3e3e475c1a7824c80a784460963f8a85e26a72f8c21b6c8be34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 32.1MB
        • SHA256 ad00df2d78586aca7006f9b57167daf9a015c35a1935b76533361c1c161b4979
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 31.7MB
        • SHA256 934109008d56cf1006a0dfdb232a2b2f8cc2785458327df0e18d089a748d9069
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 34.9MB
        • SHA256 cc44bfbd8f758c019f610170f71bd4b47db78878dc6a9fc96e1f1fe0f1b7ff15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 31.2MB
        • SHA256 0b4ec058e9dfb3edfe56b614a28699e1e252ab28ac6184ebbfcf281f3180ddb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 34.7MB
        • SHA256 e8e6e89a68dab6f1cf1aabd24ce78a53c43af8f4ab5169c3a34586115e7cf543
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 34.2MB
        • SHA256 9a546e358d243a1741f908bb0f023db3b14507459b7e641210a32490981199b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 34.1MB
        • SHA256 b8a14f6eae1cb998374a1aa77c03ec395c13b0f122ec9d9386cf50ba6de347ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 31.1MB
        • SHA256 94d739a161dc0a583aa5431c1a39f95a770c750e870597342ba4154a592dd580
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 33.7MB
        • SHA256 720a4bc2bab0e868a37546e38b13f16f1c9f9a530d8d2ad9e8b4b254aae403a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.4MB
        • SHA256 8a07781c8dd47f3cd720c38c728c28bcbe89a0b55d0c5ed7c14c4a86592f1b99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 30.5MB
        • SHA256 860e89afe880d6a3fb2d0495a39352965f1f263d984a1b189cd91d6021ed51af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 33.5MB
        • SHA256 952a1382775f3b4a00af5fb4f8117c3212e2978dc2eefa4f384bd8d225357213
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.1MB
        • SHA256 3ae9eebaa629985646ae47727710669969c16c7abf4e50d647d71ae7d0c1a84c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 29.5MB
        • SHA256 6e29ff208c409f5cc4fb03827538cb33d711d91a04bcef23cc42396fdc7a5cd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 31.8MB
        • SHA256 5d443e1deba9590beca272131d5167836778cf07e88924cfe87dc9483eeb6df4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 31.6MB
        • SHA256 184c7b311ba444ac0293f4b0474ef19cf99dffa121a59f19330026f60e87900a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 31.1MB
        • SHA256 d62e0f90d0e72013913ba007c56550c014af9909f51351bfda737f6158317a74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.0MB
        • SHA256 bfb834f9c7add50e2ecc768573237259920f123476def15ec19be11eadf72788
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 30.9MB
        • SHA256 a5a487f018fb98b3b266428b03faec3429a26f40db7975a1bbb5257b09b4f0c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 30.9MB
        • SHA256 3016f393ee6ef8c70a2b295145afacc7ca6b0cb0ba0535f7e637be9247156597
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 30.6MB
        • SHA256 2818e1efc3ff7aa1f305fd97d5bec5814699bc3a5ae7b9fd07b45ffb01c407fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 30.3MB
        • SHA256 61715d14c475774fb1b27405f2b3d032d20013f221bc7420812421e08d1406a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 30.1MB
        • SHA256 e8d5b9eb04acc811888b0521fca32d5d1a7c04cc029df6d37a06c4eabbed9982
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 29.8MB
        • SHA256 2d45787c78079eb57b7d149593fe9b06ee09721fc4d9479cb02302431c08eef1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 29.8MB
        • SHA256 1d12ddf5cdbec3e8a8a4649d34d62f67004a9c0a5267321cc40587ea000af1b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 26.4MB
        • SHA256 ad1544d3ff32938d852a28ac41d785bebe1b35568e5439186c04d2f31b2a8884
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 30.0MB
        • SHA256 2d075cdcfdce778dae2b0794d0a7d060f50237f09d3c6dd80f70ffbade0e47af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 26.2MB
        • SHA256 22a94929d706a6b052606975cbb3c31a0cd6166589c1a68d30e02d045fa48007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 29.7MB
        • SHA256 2d279763ef6202249393635f5251de69e5641d92cada0facad0f3a6da209b2d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 29.9MB
        • SHA256 29bea52d1ea5d535af632012d6a5e0977bcdee0c838f24fc0d1f039b7a4158e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 29.4MB
        • SHA256 ee1554695dc2a98d0cf21a51130a0e2d2089947b243a48337cb9b637deed7cbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 29.6MB
        • SHA256 9f78ca2d40d0e853a94654ade2c6d3cc13f2db242a0819de7c759c406286252a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 36.3MB
        • SHA256 1bd98f30bc91e4fbbaebce11a81938d056f65d0b02dca42988ec78c1f71e2841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 36.3MB
        • SHA256 99e32441b0f2c678c4bf54d2728fd0a05e0d64f6041ce70c6603a09b43a89aba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download