Overview

overview

8

Static

static

3

2026-08-08...as.exe

windows10-2004-x64

8

2026-08-08...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    32s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 15:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-08_98ee9ed67d1a9218107b273a6e367cf3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 16.1MB
  • Sample260808-s8c3yahn7z
  • SHA256 5bc15fec635507876b056656b2ee2c265d6e63bd86423db6ce8f56649f499217
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_98ee9ed67d1a9218107b273a6e367cf3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_98ee9ed67d1a9218107b273a6e367cf3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1464
  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_98ee9ed67d1a9218107b273a6e367cf3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-08_98ee9ed67d1a9218107b273a6e367cf3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4188

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        CloseDismount.asp
        • Path C:\Program Files\CloseDismount.asp
        • Size 16.9MB
        • SHA256 40524b764b1d4cdffa6994cfcd9914eec73ecc6a05a033fefb298746fd8b130b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 32.5MB
        • SHA256 03da3b63022cd9f644c44c43a083c0ff1a0efbaf9553092ab8bac87cc1448b80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 32.2MB
        • SHA256 85737253cee971d0e0d7cb973e47f68ca2d48b6914c1b2cd7ce477a974a940ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 36.3MB
        • SHA256 41c13d4fbe784c57e918423d6a1fdb0b68c59b4ec7f44f98bb94a89cc0ea524f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 32.5MB
        • SHA256 95289f13fd8dd1db592c55f38f6c107b53e91e0bc1cc69fb402a6bf499886608
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 44.7MB
        • SHA256 bd5f43a960b29bc5a9e602a06f0a6cb877ebd3754e6e97eac14484fb83070a0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 34.3MB
        • SHA256 5841f2c3d554fb01ca443715132c8b040b538929ecc1ac92d46b4dc91ad09b93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 32.3MB
        • SHA256 5c62c2e0b6b97ea461fafc4d79c68418607321cccabb595d5b685cb66a274f49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 30.5MB
        • SHA256 cdee2633fcd03bc901bf3665477a821d5000d6be0f6011bb6a4e5e192b6e95ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 29.7MB
        • SHA256 ef5c5a849eccfc1c99c6444002b30cfbf2fddf2ef9f2f577be19b64c235650e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 31.1MB
        • SHA256 60141f7795f730c50a467b6d4076b95020db66ef5ea5b6e29d13ffaa5eea76fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 28.9MB
        • SHA256 1365af4f985f9859e7264e2cdb4c2c9d011d4b5e4095765455b013f5cc5fb832
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 27.6MB
        • SHA256 ec8a676df77ecf5175db3fef8c6ff38f7e0327f3c2178ce49db15d22d429abc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 30.4MB
        • SHA256 0021a4a41ff212560304900c90a74a5c7fa785a6cfcab905a5158ddf3b0fc56d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 29.4MB
        • SHA256 ae0dc55f6c07780cb854b22bc6c66d07af7abc17dfaac822deedfdea0cf61e34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 30.0MB
        • SHA256 6fb2cddccf52d829d38e4f13230f09e2ca4373326184a58383dd109eaa19679e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 29.2MB
        • SHA256 1bf89ce9ae20f31c6d6e09f74632a114f64d41312de84fe728a9e1acc0dde066
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 28.4MB
        • SHA256 2078dd5aaab48a059a4c7d433e8bcba5c67720b12604be28fd16121e5871b289
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 29.1MB
        • SHA256 ea3fce2ee2c4de84142038b51b245d6f0f2a40b16b839cf9a1d237b02f1065a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 26.6MB
        • SHA256 f861b17e0c2704f0e95acdcb6618f2a582fae60ccf1420f3b26d119a7b255cd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 29.3MB
        • SHA256 0900ebc08e61220f236fbf977eec7e652e48f9da4bb47fa5af167c4bfd253aca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 27.4MB
        • SHA256 66dc3bf9aa2aabeb7f19f2c68b03deacfb16f689c42b577edd22c06de8437a69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 25.8MB
        • SHA256 77bbf4bc1603fa0d356e2ef123993d508cfe6bc9284ca594b8980d283fbef48f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 28.3MB
        • SHA256 735276289a79ff4dd11294c2f215f658e6a0ce54403fa1da3baca8e61e811bce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 26.9MB
        • SHA256 02c1a57b42ea9f6778627668688cbab8847806a2c910f382160b27685f2c39fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 28.5MB
        • SHA256 413bdf491d4b0eb5aafb4a6229b35b7201f0660f214ee84ede32149b2b7151e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 28.1MB
        • SHA256 86b7effa938d7cc550259e8b4eec8a25ee234039cc59b1e35a2786889ccba048
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 28.1MB
        • SHA256 6d8a90e2fd37ef4e1b34213544223dc372c9bf70abe586cd71ff65c3e697b08b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 27.7MB
        • SHA256 964cca3149b0e16730309718f38c02ebfbe76246973459c4ffef92290f2075fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 28.2MB
        • SHA256 966076ecbd5145fb6f21f0caba341c49a81c2f4efa424b5c5f5a15479694f333
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 26.5MB
        • SHA256 42d3fb8dc778f6fb9f70275894f61c969293983e0392cd9c60e29050d60db3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 27.8MB
        • SHA256 38bb0083af58908b4c58d93321c842d88c53a7276f0a2bffd63dfe5def19b8ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 28.4MB
        • SHA256 6f54b5b4b9a506cb3a114f8bc1f1be4ba8297e65a33e85d918f0fa5a4e24fb5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 128KB
        • SHA256 e52488a8a3c5c15a2f928eb2127c84d20ca0143b2598bd3c627a271a6a7a3d72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 27.3MB
        • SHA256 ead51450cc3b31258d22e4c298a13aad9aa387a36e6106ec37c56a6f50bf8991
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 25.1MB
        • SHA256 f853a5793c40c56bdbc95217ff90c4ca3e39f9259339b154a2796786e68c8dc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 25.4MB
        • SHA256 6c573951cd206642158c4f6729137f9597baa00c889d1ecace8646aae6e6a1bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 16.8MB
        • SHA256 735d4662bf60aee0593ec12f68641a8106cb0435976357a29a4d2530d3e83ae1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 26.6MB
        • SHA256 fd3a7d61b03ffcc41bdcedee37dcb89d5d24eaef5a887f43a44e2c31d64237ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 27.4MB
        • SHA256 78ab3c7c6452d5d2493d80663330fb0c59b201a9f684df170c85616881f719d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 27.5MB
        • SHA256 19d47430fea04e84a667b0ada58f662f3117e596244d896a14c91f2ba49a2e1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 27.1MB
        • SHA256 43b98658cc609b3d5fde3764d8d5bd93f691cd70e5f7d280a1816ab76e6d906c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 24.7MB
        • SHA256 a9cc96a78484b1746e78830b3d1be2990e826fc5f6a9884fd297ea59e6a96e28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 24.8MB
        • SHA256 d9b660874cb66dd20c175268978c0474bb24f224f1ee8ea0f4336ec5495c3692
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 32.2MB
        • SHA256 951b5d4834f83262c46739d80e635c6908c715ad99cc5f70d060a86c02abe8ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 31.8MB
        • SHA256 2d2258f39a70187ce172da6d7c45f565a79e15231ba8f1e62de20e4f7442040d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download