Overview

overview

8

Static

static

3

2026-08-08...r_.exe

windows10-2004-x64

8

2026-08-08...r_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    44s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/08/2026, 15:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-08_c9240672322a7a3fac23de8fa97baea3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
  • Size 16.7MB
  • Sample260808-s1qn3azbme
  • SHA256 5a97588b93e35ab79b9b174185e64d4019b6f3a73590394b75e9ba7157d091fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_c9240672322a7a3fac23de8fa97baea3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_c9240672322a7a3fac23de8fa97baea3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1708
  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_c9240672322a7a3fac23de8fa97baea3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-08_c9240672322a7a3fac23de8fa97baea3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3992

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 17.4MB
        • SHA256 fa26c3c3b0b9923d580d469a49ec07c4460aa37bddfda488b4088dcf467f52aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 16.8MB
        • SHA256 2be708bfdcbb21aa64e55c2e81781259c94aff5afaf9c7697ecf91879d126050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 18.1MB
        • SHA256 0b10f1c35ac5fa89b4af6a030ded529806b903fe82d801bae73b5889348ea758
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 33.4MB
        • SHA256 749637ad54e8f4922f256cae351c0241c62652387c4d9df067bb8beba116e898
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 33.4MB
        • SHA256 97b250bf4bb8f9c0e7329c162df90904cc41cab3034082a0b71e2186141d12c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 33.4MB
        • SHA256 67ce6a473307cb7cf1ce743cd66682cac05d54dc098e623c8859112704c4a41f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 33.4MB
        • SHA256 72c6a78fa6aee3e43b7a578926b8b25f2c4d33f28bdbc750f9af27b068ba24e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 33.4MB
        • SHA256 7307fc934546ed392be89910931cd161660faacc6a15e4c46834b5a22397e047
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.7MB
        • SHA256 92c64926bcfc6583f2589f73a2b491f3a35584da76df97281ea0f0dff552c2a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 33.4MB
        • SHA256 85fa5ce47014c9c2778ab80947980ed7ea827492e4f388835085cea7805ab791
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 33.1MB
        • SHA256 e21c53750df0e3c5c1c1cb52701705ccf5200c52e7f63b7d1d5b7dc88dd92fa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 33.5MB
        • SHA256 12d30a5bfe956a269d061aaee32393fbd5545e56ef8440d851d353a381a7387b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 33.4MB
        • SHA256 2559a3dd920cac6bd9e27f036e4ac1d3aafad6f3ebe7e489370bfb95f3812191
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 33.4MB
        • SHA256 aaab938e6eaf1886bb106aecbddd0403c5d7ef4c34ebbe97e24244654dffdec0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.5MB
        • SHA256 d0b1cb8ab0e5a9619859e8c06fce9822cb6654535cca5f3948339e564463c902
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 30.4MB
        • SHA256 2372ca49d33c824adbb78750a12830eeee52b02e2b099392b7ee5bff16fd2884
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 33.5MB
        • SHA256 3c2829f194266b4f1befced53a0f93e45481b2b2c7b580a7ef0a808c621a8261
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.4MB
        • SHA256 56ee8bbc899889e014af322eadccc2af7dd29c99d409c59435601e5f979167dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 33.4MB
        • SHA256 ec57b9217af37f0038a7b22ea4040f5f388977c08be51859a74cb49d7a36f018
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 32.1MB
        • SHA256 5ce24a0d73a721c67f6b62386e6fb4f43fbc7a05f514daef99461c057c2c4875
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.2MB
        • SHA256 b34b9ecc48c24cbeabd55950e6d26bf462c2d15e0b0d69fbc41b072c854030c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 32.2MB
        • SHA256 080f0bfc38d809c32915b86061d44faa5c7e508cb9118960db5cf2d8d0e159a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.4MB
        • SHA256 f8cca574fd2bce7a6844dd8aa0b57b0c524215afa5618d979d2ade5e82dbc4ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 33.3MB
        • SHA256 a406859f62b0a2eb8f85ddb0359107a705d7a4621583ae8f98e4db9a9494e850
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 32.9MB
        • SHA256 e274373900f9039f944ce9646aa00ad0d8f041fa775dd7fec3bffff918bd5189
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 32.1MB
        • SHA256 cf3c49cdfd56f3721f71f92269c8ec3e5665680288f3aae8b56932220f6a2f10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 16.7MB
        • SHA256 a84026b63f8457460673c93e48837f63b52c955a82f505d96be2a255ebeea852
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 31.1MB
        • SHA256 f207d5bc6f0c139e2f57da9735fa09856e6dda215911a39ed9503302ef0df6e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 31.1MB
        • SHA256 23f7ab3b48ea6cd6dee4581e35b0b8d46034d52d31b5fe2746f70e56c8d5cb8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 30.2MB
        • SHA256 4648ba7c0c43a57325672e895edfea6442dfe8b752a33837521e4c75824fd700
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 31.0MB
        • SHA256 3e258209d0273717e0dd40694ddc302fc650b957f430bccc958cb7f30b18cf0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 30.2MB
        • SHA256 f1a33a2217414558046147da02c66194f99863c709a2012b0c3f8d9acc442aad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 64KB
        • SHA256 79a0b1f3b0958e830806c9254c2ba2af079ac99713004febcc3610200c9f504e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 32.0MB
        • SHA256 c4bfe0333c3714f807621a578f98c5803de9f939477106a8b2349882e7bc8c69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 29.6MB
        • SHA256 47f8cbb992ad352b25f499e11552c8df0504412119e3d2649fd78df60ecbc7ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 25.9MB
        • SHA256 83c2d47df46abe69b8003289b36d8e3bec27f33a40f92be4954bc119a16ac6ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 29.4MB
        • SHA256 588df9aaacb0c5b5c0cc0cc3e0866ce0d876f71e6b496ebf3198585afa6981ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 29.1MB
        • SHA256 2a185c1b0cbc5fcd9b98696a067ab93b237963b57b449885ca374eb22b8fad41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 29.1MB
        • SHA256 576bf3fb838192bb47d1c7c2ee6a45e6f080edb8abd694a939ebab68bcd5ae1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 29.0MB
        • SHA256 86605c3f25a58c8c17094b81cc3e521311a1682b700a7d5a88771bb80c0f5826
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 28.7MB
        • SHA256 4e676756556053e924bf4a27c5f5cd610703093a6a959ed4f4cce998375795bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 28.6MB
        • SHA256 ad8f80b63cdb02b2cf306ec74fc3af5147799de286583c0512fb1dcbb0d0c98b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 28.4MB
        • SHA256 8072135cf7d2694be8339cd8ce3c274b3d282d193ad7883c9af8a8c175940663
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 26.9MB
        • SHA256 773264c95a3226b0f38328e79d95d47bb1df52a2cdc000546e1bf55e75579d44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 27.0MB
        • SHA256 9bb833a8f6a60a260def5744c97ae2b34875ea25d5028437e545ae94b1065fbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 28.0MB
        • SHA256 4352a5a3d8b05946de284dff9223fa62987f55ef8f010e3cb7d9accf3f10d342
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 27.9MB
        • SHA256 acdf2243d706f9a402cda8cf523d74a96ee5afd9929508feca5b6e952f3460e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 27.8MB
        • SHA256 5fa5f66339c2ca1b52356eb3a0c7b30294696e214e74f15b917ad380a1cada76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 27.6MB
        • SHA256 016ecab1bad25156761285b768f43fa278408a735c9b49a12b541c8545bb531f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 27.8MB
        • SHA256 0c1330d4f7b377b1086b321ae562d603d5fa042ac5d9178b3b318820b06e8f94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 27.4MB
        • SHA256 d03ec1ad7a49fd86cfc491120429ff7b3267e965aaf85eca1c82dab7bce895eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 26.4MB
        • SHA256 a2f05466f25513f3ed1a5dc7f4cc122683a6da22e365d30407353643a1e1b9dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 27.4MB
        • SHA256 63268228abb280859545adcb8b49e422ce7a32c1432361712cdfff7241a2eb99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 27.4MB
        • SHA256 d9a273d6c56f7eb38658ef2e2d64c37254c8d1f755f68047931a83575fe70500
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 27.3MB
        • SHA256 f73829715f45dd2a08cf28b5ba7b8f3ecf028e5d26c848c38bfb08ade9665427
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 27.2MB
        • SHA256 e7453180e4a3ba34975402dd5b345898f430064a0462daee910abab32500d8cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 27.2MB
        • SHA256 f94e5b2f5e6e6d03a2381d19e76d8d280e9da58b397bee2d5aa91ee1053192fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 16.7MB
        • SHA256 15a1d3f33d21e95488ad56c74c226e2801ef37e8575b060c04e1c0a353b3331f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download