Overview

overview

8

Static

static

3

2026-08-07...wk.exe

windows10-2004-x64

8

2026-08-07...wk.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    60s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/08/2026, 00:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_8f1a7072bb2ac652164fbb55fc9e3ab9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
  • Size 22.6MB
  • Sample260808-bb5y1ser5w
  • SHA256 a604149487b6346351f7d061044e37734f96c4d5ba63c584af572231746a1cf5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_8f1a7072bb2ac652164fbb55fc9e3ab9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_8f1a7072bb2ac652164fbb55fc9e3ab9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1180
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_8f1a7072bb2ac652164fbb55fc9e3ab9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_8f1a7072bb2ac652164fbb55fc9e3ab9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:628

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 23.3MB
        • SHA256 a405c706b57f1f01cb2ba5ad6f76d2c2623f75e59680c13e9d36c7ae9de3d139
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 22.7MB
        • SHA256 1cfc8908ec08a41bef8274b96e293e32810c3a5efceab2bccf1808c128b2938d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 23.0MB
        • SHA256 b47595c3a424b203ef56f7ab7d7e34ab147fe4f337034abd13129ffa91c81d9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 24.9MB
        • SHA256 f9913499cc5e638836a7c7a67303bdbf2e3f665a21ac68871ff7e1eb4aca6919
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 24.5MB
        • SHA256 fac712f1ad21f8197673e66b0135799eb3c0a1fcf70e85e77df1d34a8f0ec690
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 22.8MB
        • SHA256 b14a032b0e683862a4066707b93bc6836c089e3eea623271ec6b8b5ead69264a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 22.6MB
        • SHA256 cf73b5a14a9dfb80f9204f71caf219256283ec9d53ace1c46eda08ffccb8a7f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 22.6MB
        • SHA256 dd3c01018482c630f00d5595ef3296e5305fec4b64a8e75b6e199426c608069c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 23.1MB
        • SHA256 903216834a785edf02070cc8c14ac51d447c441ced241d9c8845564c1c4f739d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 22.6MB
        • SHA256 cf23861509ed8972530d3fd1bb2aafe9f366697415c420baa3bfc540876eae9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 42.0MB
        • SHA256 97ec71fca8959b904e2d3c01daf7e52b5f2ec8f95d6f6c6ba2b172a3d91e42dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 33.6MB
        • SHA256 006df850cf9467ec0b256ba502fbd18ef5e3726a0b4fa57a40b31131c1662453
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.7MB
        • SHA256 cb32f070140ec123a756debe04fb8dd41131de5cbd8e96917fce16bea57a1489
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 32.0MB
        • SHA256 4794b3656e55004adaea6f9ee2b5aad79fa4055c71f70d8881a6004fc0b7a811
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.8MB
        • SHA256 85df37d1277d4033cdedd15ac689f22096513416055882f38bfe81e7411d3889
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 33.9MB
        • SHA256 827415c66f441913790cbbfb40585418a177a3ea9fa170a02427b1f65dea8b9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 34.3MB
        • SHA256 81074bd518182feceaa0e0320f0313e8d33a61ddc1a365ad734b2e897b937197
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 32.6MB
        • SHA256 db4c4ecc90aa0ebe98eddbb8653b6fc55ac9f83fff116858411bae27b705d46b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 30.8MB
        • SHA256 7a21c3212ea89bad3d5f75722c98ded9f69f8c140e948d21f143b6bc6a9f6786
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 30.1MB
        • SHA256 8aee45ee0ac5ea3970c10869b4ab7f7512c3ecdc885866adf615af79774aae5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 32.2MB
        • SHA256 d76ccb644c82a2066536072ed0fcd9cec01fbe1a99d0db7399dd4888d16fd31d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 31.6MB
        • SHA256 12e1c92eb77123fb7c4e2f469e0a4718c96b9b64574e7187c0f1665838b1d818
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 31.0MB
        • SHA256 9b24a4954115c64ac7ae54e4c17f0d085cf973908447f0e324a353072e195f22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 30.6MB
        • SHA256 d4baececd85622cfc59b74d0cd9fa7cf8e15c41f04b6d7367d33187a0e6f5ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 32.4MB
        • SHA256 be9e02a1191536006b5f06a52002faeec0e3a28ccaf2da9cb64c5fd8ba7feb9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 29.4MB
        • SHA256 8e2437795d3fc2fd9bdbd3320b1c1a0d8a15a1e14c178a051693809454143fdf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 30.9MB
        • SHA256 89a0ea25a13f50248e09e7ecc581f08bbcdd3bbd13ba82de703c01dbb7a5eaa4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 31.7MB
        • SHA256 39cd2fd0091790af952b2035b42196e964d33df09386d1c776c8afbdf557a7a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 29.9MB
        • SHA256 ea56a974fc1adb5ee9af61c60556eee74c8b73405f688be76415b49e05134d73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 31.5MB
        • SHA256 0052fb6fdd31ab4a1f276141e17ff1fdf92c57b6ea82151e5db08ce3b7cee4a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 30.8MB
        • SHA256 f47986bb03bb4b8908dc2291eb68d7710f4af575db77a0dea18f0251b5ce2a7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 29.9MB
        • SHA256 30ad6c3347f9f2978d52b6ffa4966b3c7a138c9c7146330122516ead713aacbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 34.2MB
        • SHA256 6e4d4d7a0e7236d29e8c0b6b3de707f76cc8afa9053229a5a69e4b21075e1a0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 28.5MB
        • SHA256 018f88fda28439743e9a265b4365ec1ec9ab931b8f4e0885e102e78ae54ceb45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 30.5MB
        • SHA256 400f2a2a4d5f418c32e18cf8b8120440dc4b65ddaca2b8248a01c6cea5a72b97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 28.9MB
        • SHA256 3fc7e6378726b50642817f2b3cdb0550aee98b639fce07fc5b03f52e7aaf641e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 28.9MB
        • SHA256 314f64490b4932e096a2a4227f0e43b234a1555e4925b5ee2714c10fc5bdba8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 28.8MB
        • SHA256 d493760ea62eac118d7be5e8c56efdd290970a28ad244687f54a905ccd3d625d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 10.9MB
        • SHA256 7c8c1109cb044aa597e43184a36d3ec9173c3b0f0172e284b512868a111ad02f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 29.3MB
        • SHA256 0593c85c5eda3dc8b60caee4f3fcf209f459887a5461359354fc92fa8e80c256
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 32.9MB
        • SHA256 32ce5b52f426bd515594c3697381ed14845d527ff4d6ea032bba5440c4a31e0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 29.9MB
        • SHA256 c4081f483bac0469c4e3dbea631e14ce779f1fefa2214d53d27a49e5d5f04aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 28.4MB
        • SHA256 2b6f6c0e63fb2b3d1488c034a9b2e68a801525c28532bfe31e5fd25bbe6d9813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 29.2MB
        • SHA256 67a6cb9105274e9d0f1c154e723d2a16ffe92b31d54167f6ca96a129f070396c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 29.7MB
        • SHA256 0ed9ef8942abf1afe17b7aa8b13ea1dd0e48e5d5503d001c23cfb679fbbce2cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe
        • Size 30.4MB
        • SHA256 70ac0c2d864797d4c1fda7b45d0af92fe2a9d835392643dc2e19e05fb5418237
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe
        • Size 27.5MB
        • SHA256 51c7c0c4491be623c09f3b2218fcade0d65d73e837d139709159f215840ffd41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fontconfig.properties.src
        • Path C:\Program Files\Java\jdk-1.8\jre\lib\fontconfig.properties.src
        • Size 31.2MB
        • SHA256 1021b27e56b0f7cc84aa0e8b86390bb68228dcc2e74e80aec93c0c7f0fc1984d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 22.6MB
        • SHA256 a604149487b6346351f7d061044e37734f96c4d5ba63c584af572231746a1cf5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download