Overview

overview

8

Static

static

3

2026-08-08...as.exe

windows10-2004-x64

8

2026-08-08...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    36s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 14:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-08_107add5ce33040e3e4a312e396f7109c_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 18.5MB
  • Sample260808-r7eppsszby
  • SHA256 24f684734d7abf7c9aed9825fc201584baa2d102dd9600abc71824466e70b89e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_107add5ce33040e3e4a312e396f7109c_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_107add5ce33040e3e4a312e396f7109c_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2508
  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_107add5ce33040e3e4a312e396f7109c_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-08_107add5ce33040e3e4a312e396f7109c_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4136

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 20.6MB
        • SHA256 c9bbbaea4f5cb0721fbaea60f765bf02248070b6049acd4cef732e64b22333cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 37.1MB
        • SHA256 58f49914bde372b87960c53c0168bd43bfa5d53c1d9dbd8c5bfcee4b019a1d52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 43.1MB
        • SHA256 c2164932b62cd7c61b428e41d79825c2782528a664ae01b0629076bc9555c3f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 38.4MB
        • SHA256 a75d642a79358ac832763dd129fc88a8970d5e9375eab6970aaf36a0d28e3710
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 256KB
        • SHA256 6adff2403606f3fae51ba272308ce91c8124c63f116c3d886a5a38b4ccbce497
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 40.5MB
        • SHA256 234be130cdeeba8b42615ce2d06c2003fb5aeb66850bf4ccaebb5cad59a0178a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 39.3MB
        • SHA256 700a827c857e03a269a2d08a862acd61e920349cdd046cc0f35d835d890eaaf5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 37.9MB
        • SHA256 9f9168234336f2fbe117a9fd91f7753d404a86c7cda8d33ace755e2388ce8a21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 38.9MB
        • SHA256 7344ab375f03b41b5bb022d1f28983bdfad5da5caa1f418b7525a04e96691b53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 40.1MB
        • SHA256 0e3ebb2fa11fcfe02e18590092f58c8e5e49b5f6881279f67c53163cf693e965
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 38.5MB
        • SHA256 b1e8b371c1590e707850003b8e67462e359561650c9667143e917a8f21916403
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 37.1MB
        • SHA256 67a59a5447ab4013b8563a7d022d85997be41047e1d4d2f8f51814c6b2784239
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 37.1MB
        • SHA256 baadcc1c5e87cec158c6122014294274f3ff77083c5bb34bd9ebdfcb32ca6bfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 37.1MB
        • SHA256 056170251416145f0201e1f211131097eaf758dade9af46c8db1ae740dabc779
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 192KB
        • SHA256 56d5b720b4307ef448fb38ef6495ea0a6fb25e8bfa8f9c140729b820c8e0cc1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 37.1MB
        • SHA256 48ebcabf4745bbe9f0ab38e8fa42cb713c95645d36bf6336448c405e64f02cdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 37.1MB
        • SHA256 b96ae7555d8aa2243f654dbe017d49bd6f4f6b3b5c95815c72b6891a73a75e0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 37.1MB
        • SHA256 94d5291880be649c071e7d0e0f3e14057b231a62bb9b11de59ae99b7873f1038
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 37.3MB
        • SHA256 c6de74f434c62ec03f54bb1693e27f3bdeacfaa777ac4601593a35b4593cab3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 37.1MB
        • SHA256 90e9d030da87c7a36c6b083e0bbaf59317cf62a0e698e3d6acfe1e4463bad7b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 37.1MB
        • SHA256 4edb590e8f269a1b948e9b8b74bc41d9a6a108bbec014af1bd2b080ca936cc48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 37.2MB
        • SHA256 f51bff6411116838c8bb905dd07cb5556119fabb8e63095f7c66104d7f37c407
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 37.1MB
        • SHA256 ba989e7edc48036097782662b4d61152e0bd8b22a64cd133c36fb5fa6f7b0029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 37.1MB
        • SHA256 753903ea552dc3ef956abea25e27af024437d1cb45e39ca4be39e3e93a25c260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 37.2MB
        • SHA256 9ae83e6667562a0961e485b7eecfc4c2fa50ff6e3cfe40d3005b411a2f0cd8fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 37.3MB
        • SHA256 4228d866e82275ece6f8eeceb134eb3ec68432d3050a807afe47541b4eb957e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 37.5MB
        • SHA256 ff3558454f1f3353a5becc1cf0cec40c2ae112851bd1bb2407d974648f6099fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 37.0MB
        • SHA256 48db07c4399c4bf0ae57c4d1d86cf8fe430ee0f59ae74d74b5bf1a11a7b13a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 37.1MB
        • SHA256 7a8c4abb8bc54857c412abd3193393a28de52905565e17e0cd9d1709cd39ea7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 37.1MB
        • SHA256 38311e12d87efd24446e31cff19ab1fd4c6b1de6fbd32e7f14a1d2e72eec4cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.5MB
        • SHA256 bcc89923b21babe61fad23c1c1b82d4a0bf855a1f9f62667f3f92146bb25ab29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 37.1MB
        • SHA256 afcb819ac17f872c23c5018d1458dbdbbca70e432b9d7970b804ef7ec13d9a94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 37.1MB
        • SHA256 adce753acde36302c4568bf8b71a5ca31168a0ba099e380f4f5a8a7eb8c5b8bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 37.1MB
        • SHA256 2610a515f0a7fb84f5632533a2d3a4a966798f9eff95b22e0731c0dc76405ef6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 36.8MB
        • SHA256 ec179915b67c864fa9160acf94a6e0c2ea855664eb5308299fedf53526a256ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 33.1MB
        • SHA256 5dee0936669a1b62e940c15692207ff8bdf021aa818ed69105d97c7c00898b05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 33.7MB
        • SHA256 5f1a35454bc13249aa0d8fc860be6a7e015ae330066aa31ff81a6674da066687
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 36.4MB
        • SHA256 74f8c80fad08c1cc7ad2f4d87f7549a92eed67db351bf71b878d8df9cc1bb1d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 34.0MB
        • SHA256 8df5708b682146624dc6d18a4f8520186a288465881ae2f26be08f5ccb365948
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 36.8MB
        • SHA256 e4cfd89c58ed29c3242df0af92065c41deb9827ecc0329ddac85084152a0fdce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 37.1MB
        • SHA256 d94cb63c154909d2c01f607628535ea01171e5fe4f3ab6e5ee1c541665863fac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 36.7MB
        • SHA256 2cc43e727f72875ef7fedcd11967d413d0e9d7cddc08bd960cf46d82f535541b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 34.8MB
        • SHA256 92f88493537e5c3e4513f63fb1cc772c4bb63e287bd1406a7d6cc56715524bd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 36.9MB
        • SHA256 d491fd7fb6495d33ba9b51ce441045f77a683b7b140724f2cda9785ee79e4855
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 31.9MB
        • SHA256 64fde15854f8f68e493d4b9fd77a9442087d57c04b8a21d7df912657f75a2615
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 35.3MB
        • SHA256 85c9749d7c6a3e374a60c925ca053492a2b4eabd0603151ae4cafe23245eca72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 35.4MB
        • SHA256 50c1141127f5347d978fc45e22ba26ff1314f30f203d4102bf0fc051ea265407
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 35.6MB
        • SHA256 1d4efb14d7372c4b3f88842cca024e9ee7fc87a9f04cf26e06542929fd5bbf6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 34.2MB
        • SHA256 b7bae567255feca094b7fb0e33e20d58f4d56c83c8ce13e1af0568f2d1c8cce0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 34.5MB
        • SHA256 399bc722a7f238e7af80833db63c1cec577039d653d65990820fdc6a4f51c83b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 31.2MB
        • SHA256 a2a82c3033fbae464b11f932feee03c3d15cc86d86f6534ba07b2a428500c366
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 34.0MB
        • SHA256 1489b7140c478ab272ff4e26c2f320e5106633f0b4494f2c20670f9cc7aafd83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 30.9MB
        • SHA256 90860ac1a0661de1053ff8127969c49165eff570f8a9669b5cbd6aa44b555b7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 33.6MB
        • SHA256 0c378508e006ec072595d1897c076345cb5a09bb26e08cf3edb057ae95822007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 28.6MB
        • SHA256 ba4c8cf592cace893c013e4d2e3119974b8450bb9aa236e82d847890e8402ab0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 37.2MB
        • SHA256 af557fdaf6580fa84e14d2cfa56ebc4400578395ecc02795660ce3036edb336d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 37.1MB
        • SHA256 11c99d522faaa9496b9ada89b4c5b3e4d4b18fb554ba24b0ea71f7826ad56db1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 37.1MB
        • SHA256 43f15f225bccdea483d4c528ae81b22c875359ef89d06b7ec7be2c30fc5d1457
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 37.1MB
        • SHA256 735b1561af64d8c27f4e0e74eca156637c7a0310cc105bd932e042e4ef64d42c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download