Overview

overview

8

Static

static

3

2026-08-08...as.exe

windows10-2004-x64

8

2026-08-08...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 15:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-08_adda85d8eae43bb9181652968ab368d5_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 16.2MB
  • Sample260808-s5knlseb96
  • SHA256 096089afad78ffab733855d74d09fa6975ac452c0a5f025cc7e2fed7a29df17e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_adda85d8eae43bb9181652968ab368d5_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_adda85d8eae43bb9181652968ab368d5_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:948
  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_adda85d8eae43bb9181652968ab368d5_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-08_adda85d8eae43bb9181652968ab368d5_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3560

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 17.1MB
        • SHA256 8e847584ad81061eb73deeb767cd409da5c69392896caf098610c89960156b9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 16.2MB
        • SHA256 98dea0d9442a8b399e314a1c0b056c67a997b22abef5353c13e36bd6294f7a3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 32.6MB
        • SHA256 84fbe2642b4a346286f79d563dc7ac64d4eb1105d32ed51ada93c731ff5c8b43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 32.4MB
        • SHA256 8f9d77428e4bcee4716fe0aaef631593958620cbb292cc98f9acaecd87fb62bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 32.7MB
        • SHA256 7568a35a38e62921510eede72f5ba7803e0c6b0d6a7490c9f0760483de72dfbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 39.6MB
        • SHA256 4259cceeedf6cd8ed943e85679f1bd383fd26383ff11edf29640cecbd77f1540
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 34.5MB
        • SHA256 bd287e6fbbb9767df48e8969d732fe6555ce582c759551e05e9b05fc2eb05ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 32.4MB
        • SHA256 0bef4e68789b9f90780376ea5331d310a209f015c8c258900af460412839a30a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 34.0MB
        • SHA256 75f0260fe4ac4c029c5e92e5dcaef84694a466a46f884cebe9501d9bf790cd3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 34.6MB
        • SHA256 9457d2919ae333f79456c6237cf737daabf9967d4aa1a5d56d7ac135c3553490
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 34.0MB
        • SHA256 60d603eeb87a1a12af88582642289b06d1bedb72a70ece6be466eb8009c9fbd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 34.2MB
        • SHA256 50ceb0570562d1e95cc6e06e77976093d9105386fe4be799a5b63c08fa9b7b59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 35.4MB
        • SHA256 4e84a032b1b9d78c5a0d8fa8fb0979a734b9d2495bc7ea7dddc46d0e85c7b0f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 33.7MB
        • SHA256 557740d7f43e25979b442999640aae4dd58d09e5e7c8f9442a8fa354ebcc31b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 16.2MB
        • SHA256 bf485fb9984a66bd4fbbec4a1f62b535a02c55a41db0f8e383228244b5e62b80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 32.3MB
        • SHA256 89fc0df6f01c88b3cf8dace2a1ed72cf258911e52d2444e1a38fde2771521b3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 32.4MB
        • SHA256 42719266c6c90aaf5848cd871266dae6598dd1c513196a40f61929184388a9a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 32.3MB
        • SHA256 cc761f176604343792cc538185011a5f7b96191cf800599d73061b4f991c105c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 32.3MB
        • SHA256 91dd2466957517770f0252c13a9b40283e76cade90d01099eeaef2b6b8654096
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 32.3MB
        • SHA256 29f58f9db718f065fd03c184ff36cba767586a79e71fa70b33b871c735f6ddd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 32.6MB
        • SHA256 2f61c9fb8f268e8a24c9a10d1f6924f884ff209f37110df3a0a17c276413899d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 16.2MB
        • SHA256 feab7a442c432a407c6aa13d8b186cd6abfd11bbc40b5472ad8f258a62c784de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 32.5MB
        • SHA256 b37d74de70ed344eb2374c470ecefcbcc3a5426da60bc123ec86b214bbd1f270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 32.3MB
        • SHA256 558f1f2b62d7307ca87bdc1abbaebf80ca250706949293180a14bc0293df052f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 16.2MB
        • SHA256 c2b8102e99c1805ae48b688d2c3610d8e598ad249d4d109f63364aba258eae1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 32.3MB
        • SHA256 c4ac5a9b865cd1f12005c1efee6a3f79cf41f88ad8405f46985481e85cb5939e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 32.3MB
        • SHA256 9c71e14920de38f746ee548e7aa3b7f5275b6e8fa86e9dbffa18472d59ff036c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 32.3MB
        • SHA256 d2abea5ae034759c0f617b86b47eeee35b54b39d590649f05282433601cace61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 32.3MB
        • SHA256 22d468b0b0080364ac59a1c9ee754a46b13ed61286274f215a5aa662a6a2a920
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.3MB
        • SHA256 5f484cb2d6db76aead68971bd253d24e49594f4fdcc42bf2037494b781e9b778
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 32.3MB
        • SHA256 83f5f749ae4c12fc4677809669a84f9ef785ea859e5ac5ea8dfae6554f0846a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 32.3MB
        • SHA256 f57e94435eed01f57ebef29c27f673f3a3185b92fdb73437f08f512f1178e97d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 32.3MB
        • SHA256 94e54cfdfaf5b0581dec33012434b59eb87584ddd13374680bd045276a1aaef6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 32.3MB
        • SHA256 8e786c5cc5c2bc9c53aca3c8ffe85a4275d02f701b0525424187e46244649b38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 32.3MB
        • SHA256 1e962ef587ca413c4d1b07f825531918ad432bbe9f3cb22a563a954ab5fa0ae4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 32.3MB
        • SHA256 1e01b710bbe55a47f1bb1f041629a669d7c5937d3272c5bcf2ebaa37342ca3cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 16.2MB
        • SHA256 e08bdcb9d343304804ffb9ecd91aa6ba7df05c0c3d15ead445e5761cc75bd598
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 32.3MB
        • SHA256 a4c5f18ae1a1944562be8f0a4560326b48830071f9ebd17aed9ee25260367e13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 32.3MB
        • SHA256 1f910c8664d8797f6941e4a5f2514753f854576e1b4943eeea287b5cefece9ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 32.3MB
        • SHA256 93912be4bc6c2e953d034c35f0a7eadc8a12fd3fc8ef45be883b4cab8ef8a1df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 32.3MB
        • SHA256 3d01546919006e6fc4b179c91906f1c26549a197689bcb635039d40d9e9b9088
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 32.3MB
        • SHA256 5f48a71d76c9fc6183790319974ec62b364e1fc1f8d15c91efe5d9dabfd871f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 32.3MB
        • SHA256 6785154d9498328aaed631224af7914466aa5fa9d5b56ecb61120d1dac57d121
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 32.3MB
        • SHA256 8c5417cd43f1d4cd0cd032590d146ce100c0b06b2bc7a0f560199b7e316cb3ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 32.3MB
        • SHA256 9a07005a3da0a0873824db1b87411420b75ea9291254cf1108fc13329da8e1a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 32.3MB
        • SHA256 bae8804a2b336a5edfcea77a18890687e470de56ab48649d83bd7c47e2f84f1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 32.3MB
        • SHA256 8a47f6d4bb1c26b5408deba28a6299b5a896f240917ff6e9475f365fac76a669
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 32.3MB
        • SHA256 4af62856dffdd5750ba586f16567541540cbc2f3b34f6f645eb4a4b0b7ef6932
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 32.3MB
        • SHA256 d42c3b196a6880955cb138d824660113e053a56982acdab01c71c623f2546306
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 32.3MB
        • SHA256 07a210cb82a0f25b2a309eb088b8d23ef84630efaf43addab306c315930aa086
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 32.3MB
        • SHA256 4e6aff80048ff2d2076a8baba50f2d66c553f696aaf927781b78761ed5536b81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 32.5MB
        • SHA256 fb2d7f7c02cb3b2a29e37b186fe0cdc25b5b3b1012f9ff82f6ca6a2dacafa9f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 32.3MB
        • SHA256 5230c1976210ffb5e9beff2c8063eb35377f7055c0c895e46cbe6530cc18736e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download