Overview

overview

8

Static

static

3

2026-08-07...ij.exe

windows10-2004-x64

8

2026-08-07...ij.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    33s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 00:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
  • Size 26.2MB
  • Sample260808-ar78msem6x
  • SHA256 5abe1ef50343f1eb0ce7eabe573348ea6e0d7191f565dbf642f279a143305741
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5552
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1532

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 26.5MB
        • SHA256 a77f24ced721884b7e0485c79d2027b2abc1752bf6c2d5ebb6455f990d44c669
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 28.4MB
        • SHA256 76b225edb91fe8a2e7d1e4861124b3be2d756c2d48b575e8311c73211803da2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 26.2MB
        • SHA256 5abe1ef50343f1eb0ce7eabe573348ea6e0d7191f565dbf642f279a143305741
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 34.6MB
        • SHA256 046b2760602df088c9f86dbf6b298b093f9a0a96b5f2eb2b97391a46090c7499
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 37.8MB
        • SHA256 0352c0a377cdc6d78d2e07506d304d816577e173e5e0af2a4adcefd2881b52b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 36.8MB
        • SHA256 68148cb8cd367a38190085657c4603c054ed61da54bdebf3998258edf5633001
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 37.1MB
        • SHA256 1c7d44e8e6f71d50045c7810ef7ab87fbbeaccac7c7827a6ad958fd1c1773ea4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 33.6MB
        • SHA256 c7cd130c2d567b56f5973085ec6edede6912f4245a767ae13b2f30a5b89aa49f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 34.2MB
        • SHA256 7b0de5afc06b1c1fe412d1e7b6fe73e57dc3df4c8ba9c0834e9c1a0d470a95e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 36.1MB
        • SHA256 050c59c83c57d9b48c70d83245904fbe1252555ea84ac554895157b94ba5266d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 37.0MB
        • SHA256 bdb834726966c7385b18b1e949f91ebd2c8aa8a0d654c4d1a5949d6a0fb09cee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 32.6MB
        • SHA256 4b251e8814c4f97ad787c3bdab8f489eb63dc40adaf10486ce17bb6b774e755a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 29.6MB
        • SHA256 f80390ab356db3389e84c1f7a7b4e68eed60a82c38e3d9099849a897bd0cd931
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 33.1MB
        • SHA256 372783d343035c5007d0b2a815c9b8d5bcd41edaa720d6d0872d8c4d9b94db9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 35.1MB
        • SHA256 f0ad64bc9732cd17a391286b2d420b2c5484451d783496adfe76b23e95478e8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 31.9MB
        • SHA256 4e59d0fb6fa8b80ef24a55c2be42a7db0b64dafa63fe3d7c9d0c716bd0bef86b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 32.4MB
        • SHA256 0cc573a6a7652bb1696b36fd3d9f4b909a90efdffd26e6edbfc05938f2386722
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 35.9MB
        • SHA256 639d31b4bd56d6704e4190a205f299807f0e53c956074c238d95ada51868a03b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 28.9MB
        • SHA256 d4a625fbcae480a742148922764eb05a315396fc9bca5ecf6747c9765e9cce61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 35.1MB
        • SHA256 ad8218c8779fc5309ff5d58f41feabd7096c6d238d3d11d82bd704b64b9d05ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 34.8MB
        • SHA256 b69fc9d7a2e60c14a1362cf3fc9bfbc36db47a6155794374d4f2b7fc5f7e5bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 28.4MB
        • SHA256 56fff3957d197c6d2f727ff3482b4ad77c620d774fe1a7996abfeef19396f3f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 35.3MB
        • SHA256 32519bb1d738b9d7c6eaf0e8912e26837e85fd7cf669f9725cbce5ef05271b0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 26.8MB
        • SHA256 d1336719ffa3cdc5845dc2cfdbb2ef897df320f0685149798b3b48f152a16a67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 29.9MB
        • SHA256 0d791de6b77c65148307de9640b556984e05908bc6e08394518a29aab73cff95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 33.9MB
        • SHA256 cef1e9a18398fdfb6ffce82617e53f5559cacdb153c4a57ec028676194f2ee83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 25.9MB
        • SHA256 82f3282eed8b07ff6d96d16269d7e0d8387da9af5b1fff3969d33ca411a66e9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 33.2MB
        • SHA256 76f031109495c40acb262200f221902b83a07a3d3c92360011b98e5314c5a6e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 32.5MB
        • SHA256 5c91cde6fd90f4945ad15f78c71c9039bf3cb786efd3fba5664e8af4eac5214d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 32.9MB
        • SHA256 698787b034d7d7bbcab11e366594902ce8d0bf60f2cc20e2a68aa52acfee518f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 32.5MB
        • SHA256 16e588fa880b8b310230f28d2253c01babe4d5ac47170634ea40eb339abbb8fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 33.2MB
        • SHA256 0625f734cb828c88a66f6be4d5ecb01b5aaac8426e3729a5e250e0c20165f233
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 32.2MB
        • SHA256 ee97d229b5f5b5d4cb25fa4e07ca91af1dc67dd9e4e99fd74a435f70c6636679
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 29.1MB
        • SHA256 d19e8516979a9bb2d170e19296b95773f146fa0e916ffb304f3010205bda11b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.5MB
        • SHA256 afb606b34cbfd9ebed513e46e7df41b8c44e3cf106f246da7e205e2fd605bcca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 28.7MB
        • SHA256 3ffdcc88b56cddaf59b954ba656de287149e454d31117e655fd1c19e2ff7e77f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 28.5MB
        • SHA256 28b4a345744e50236c239c62434223ab25a23b1277250e9606aa06834f7153ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 30.9MB
        • SHA256 f324e64a62ed2b9ffb3448edbbc738b56d62c712ceb340467e325f22f882d808
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 28.3MB
        • SHA256 7fb5cd1c89de475d3b01b1e641e321d97abb02d905a7517afe57f01cc6c7d9a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 30.4MB
        • SHA256 ca734aa270d7c4432a3456677deb2138c0e4ab06d75c5344064b6dacf33e89e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 24.2MB
        • SHA256 0d33af92e65829f55d3c62c9754a563b97d9e2bd993290486ed1d77fd2b32716
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 30.4MB
        • SHA256 424d7d1d9bb46a1e35843f9588c355c789eb322d976680d4ca1f587229a2686a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 30.0MB
        • SHA256 da6af4149c195a7b39f40e02b4f47193b3c6f154c001b2896ca06bfc79cb6c29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 30.6MB
        • SHA256 2544a0655e442f58033c92872e1ded7a3bc19112598f5fca99b7b5eca9d60164
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 22.9MB
        • SHA256 bb0d68ace7e8a2ac2f3fc9a3bacf21def2c875963d9736f5f6e55680c7bba15e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 30.6MB
        • SHA256 05490a5731c9194caff3879dc20c9cc212fa632c7a7034bf12bb8944adaf1c06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 30.2MB
        • SHA256 2db33db8e5be1453a2f5c431d8442f914c33761f77eba18b3dcd0d5dba7742d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 29.4MB
        • SHA256 15b25d2b356088cbbaa2de8210cd4cc9542ee94a2ab6274f56b3d47bc4356501
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 29.7MB
        • SHA256 f28308203f227b3225dfde4ac93bb67b5f3971fddd3c857900a9f1deb2c42b29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 23.2MB
        • SHA256 c067dcc82441f3961c86bfe1dc28fb55ed1c342dc7babcf0f51b6bf5ef58a6d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 25.9MB
        • SHA256 3aa2c9e31a6cdfcdfe9bee0cee45e8d3803646db816fa07d6e3aa7d310ded79e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 28.6MB
        • SHA256 509ccc2c6b9b086b70f9e7e596eb88447172fe913305c5301d15d551c064be04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 26.1MB
        • SHA256 72ca2566c15b1620f38de7e331cb46de0612fab35ba2248774f86a1d5748d816
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 24.9MB
        • SHA256 054176b0eceb3155af3c3f445b51ee2b91d2806ef75e7180f4376272fbcdcefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 35.6MB
        • SHA256 8274f64f1920eb4563b8cadce6ff58ceca8a22390f6df7003e558eb428a71575
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 34.9MB
        • SHA256 4193ec4575da9697a785a5e02ce2b0dba8a75e459842e7c59730a7639c3743f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 35.2MB
        • SHA256 da67c20ff69a1a63bc77041b2e59bdc0ed5b563faf92ec14b9840a63e4e5851e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 38.4MB
        • SHA256 a05bd5219e740e5ff5b503b5cdf6cd59f0ef1e00d7a9f47b1eed622f0eece6fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download