Overview

overview

8

Static

static

3

2026-08-09...r_.exe

windows10-2004-x64

8

2026-08-09...r_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 20:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-09_879bf140f78c6616f1406336efe96428_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
  • Size 14.9MB
  • Sample260809-zpaa9sywhy
  • SHA256 12f8cc9eb15da20805df26ecb6c1c9997a760362a478f506c26046cbda517074
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-09_879bf140f78c6616f1406336efe96428_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-09_879bf140f78c6616f1406336efe96428_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3908
  • C:\Users\Admin\AppData\Local\Temp\2026-08-09_879bf140f78c6616f1406336efe96428_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-09_879bf140f78c6616f1406336efe96428_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:552

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 15.6MB
        • SHA256 aa654e6f43877ae318f497551268893dbaf029241120f8fac3fb7ed2085a06da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 21.0MB
        • SHA256 83aad41010aa39540a7e6ee13c6db4619958554f0f8a1a225df0d92ca1f94a18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 18.4MB
        • SHA256 a967a9f427fa3e5d20b6a41808e86c0ec6112bc744a2c049710ed94418d2f9f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 31.4MB
        • SHA256 3a78a816a4c6cf9d6cc21240df3fab864f66677579e499be017e36b6a6473918
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 31.7MB
        • SHA256 4603d9611794e5fa67e9535e3aaf46ca4bb7690d6d6caa21b58404a1a9be0180
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 31.2MB
        • SHA256 17dc6ed85b4bea8b250cb4eb7d8692797e483decc72f98ae7ac6886d0bbebedf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 29.8MB
        • SHA256 95f7f822658b3d7c69083a5bfeb9f920d7292446843b3d6818ce73fa3f0526c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 14.9MB
        • SHA256 f9dcb564d9c1476f0b7709e46b86441dca35bd070bd92306554ca33b0b3ad234
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 29.8MB
        • SHA256 b72f7c085450abefb490e8b5f6ac6a5a5060a45367665bdee74003580f944ea5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 29.8MB
        • SHA256 fad7b7fd1dbd5467c8b978be12872aef622ccf1f71e16d0c0a1dd7fb399f9489
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 29.8MB
        • SHA256 7092ecbc9f4a4a12b7fb27c1bea9d10194a8a61843dd7e6e1a379bcf51add44d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 29.8MB
        • SHA256 19e56a1e851b1f413d0a34c19b40b6c19f3502413b3167776969f823c4bb2d2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 30.1MB
        • SHA256 9ad1173c379535071b466a3019f8c78f61a3e4463e96b49172907e91ad04718c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 29.8MB
        • SHA256 7bbba8f57a2875688e3afb3e99538193194865822fffa7a0c29d427d9ea84ddd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 29.8MB
        • SHA256 d9eb3bbda8ccb1fc9eaf08aeeb7de0cffbb9957f133392e078a6c47034b878e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 30.0MB
        • SHA256 606051f3dae2880b91769aa8e269d2c1d697bf10e1fcfa23ae8e652633affb84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 29.8MB
        • SHA256 c8e2a1134a4ba0a188553aac4533eece1b29116168bc84cec7175409f812936a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 29.8MB
        • SHA256 7bcfde9d644e13e5ce82a35d427d62e91fd8375ba2903a8532b16ae6357b530f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 30.0MB
        • SHA256 fb0b518e8e3240a389331668477c455ad16483f15f8dd7c2b7aa54e16fc08a12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 30.1MB
        • SHA256 be6665d5ab3460fcf6d8a6cab803e4943eba1a5f570e7ad76358caef7a630189
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 30.3MB
        • SHA256 ffd131f27c4f9e80e534eea41e3b11d1ea064c8e6289cdfb4329fd22a904fb94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 29.8MB
        • SHA256 a1006ede120deed2af79e58c3a6cb36e2eba62646b159fe8584511d134b66acf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 29.8MB
        • SHA256 ee44976ccdc6a76fde0ccab68b00ad787b61dc78a47638813642adc5ac4d49f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 29.8MB
        • SHA256 b1af96958b1bd2cd810f0498db8fa9d1e73ba5e75903cbc364dc6380b8fe86d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 29.8MB
        • SHA256 f8c8abf59a584d38032e971d8d39a4fc1e087c4510bd5cb5a6bbec2d27281542
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 29.8MB
        • SHA256 a45ad92115051c7672ae32d0a3528a597424fa2a448a22fa258d387f45290521
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 29.8MB
        • SHA256 719e9329826fce217be04408852a3257f84fc0cc87f21b4a8f7e42ac5aecc46a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 29.8MB
        • SHA256 f3d83d6977b437aa33123083ac1b116b799af8959eb4a67260ef44e02b681632
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 14.9MB
        • SHA256 4ced275257327e3c01198e651cce8bbee39cef91fee7ab2d27ffde79f08c4f11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 29.8MB
        • SHA256 d17e7d0e6321dc5791b7fd0c154d662277173e24b91b37a01faa58861fdbba4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 29.8MB
        • SHA256 526fa5ee127d746c51a5a9d215b2a8561cc41aabf2e1282c99f64af638471bf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 29.8MB
        • SHA256 595208a8c6d285b849bcca401cd94d7bde3974abbd1289add87ab66faf793cb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 29.8MB
        • SHA256 49d94ee635cf604eb1b3dd1835364214ef3fac1b77b902edde3025a470a4e5d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 29.8MB
        • SHA256 69fef235aad7597ce0a9931739df046148a310c111e1020fc60536a71b0bf7ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 29.8MB
        • SHA256 f9636bd3b41a3e2253f31b67cdeac9e9d32852359073de4ed0a0a6670d02a35d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 29.8MB
        • SHA256 48749e8b892750db908b9d7476da88ca16409e1169e86cf8e1d7ffd301c16e2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 29.8MB
        • SHA256 e7dfdeda7fde88d0e34270423ef27e2e53f6fb066c84438b9084f24bd0d41aaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 29.8MB
        • SHA256 7a46c7a3faa0c8716f34cf3e12868fed3cca633980815ceb291ec33f68f827c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 29.8MB
        • SHA256 e840fac693e9b08b0fc369ad0a85d45f495f0df8c9e6e16890cde0c9a22db524
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 29.8MB
        • SHA256 35dee89103786e704de64d4e9c1768768259c4415219c6721cd30ed7ad7314a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 29.8MB
        • SHA256 a19854b29dcc44585593f8d59e894695e2f85610d21eb970c849a0f5a06cb038
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 29.8MB
        • SHA256 b95808d3d56f6e636e8fbbe9e1b6c6f34e26f82e957c97be8c1d5778ebd07cc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 29.8MB
        • SHA256 faae62499b82abaed3f854e32e612df9cd35bfceabe2b3349b9551b84acfd6a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 29.8MB
        • SHA256 8e164e4150c6e8956175eeb740daef7a7693bba05644b21226bc27cd2a2f5f8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 29.8MB
        • SHA256 eed42b021c4c90c586956033c32c6e3659cb93f5a74de66be36568e6fcd8ea9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 29.8MB
        • SHA256 a6e7afac8e7018326856ed29740bdf946182a94e8d61b24395ae6625f365a08f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 29.8MB
        • SHA256 bd3cb6163c533ded6d97a0f0f1c606f656ca297afd4839c4da145fee9bcd0b78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 29.8MB
        • SHA256 db1acd2166aef1748f22adc2dda6058ec7a7e334e7295213b64372a8df53e42d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 29.8MB
        • SHA256 acba4947f9e3597635116e6e66295020208faf68ac2d5eab48b98b50f837824e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 29.8MB
        • SHA256 ed0a37b200dc19ce82ff197d379f52da088b377858c79b7d29bc73f6395d6266
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 30.0MB
        • SHA256 798f63d1ebe2a1e58f9bb5b7ea5bac49fad87888d17f9ef87f9fbd8a48b37a77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 29.8MB
        • SHA256 b73aa319c660d51880648cb1e67076cae3dfb0bf95ed32986eff64c05e7668b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 29.8MB
        • SHA256 b3727755ed9f23e08b7f2bd58192b3a42253c681649a3b4b8f838513ef64edc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 29.8MB
        • SHA256 4c208df0d73191e59b498bd7c123443c6adfb9d69fec545a33e8248d856b7b05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 29.8MB
        • SHA256 c05e487b08f7f04092afc4fcaf48b4d61e3e5484b950332b1d2ba9e816d1e4e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 29.8MB
        • SHA256 ca09289fab3a08a273e79506a43c91a9c8890a843c42670b97af557648e23688
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 30.1MB
        • SHA256 698596a38f4ebc16a400166cc034bfdcd3bd2ddfbcb206e1709664b00a150d78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 29.9MB
        • SHA256 fd022fac1db5fa81993dbfed9e09182752c1df8832f1b6998dfea4bf504f35e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 30.1MB
        • SHA256 bc881042bc566e09c30213764f88595b5f045e4cd11680c794dc364aa09ac1e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 30.3MB
        • SHA256 2ac6a2216636a220a9e2558fb212cee31745a2e5ab0c40486b2f3b80fc5b228c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 14.9MB
        • SHA256 12f8cc9eb15da20805df26ecb6c1c9997a760362a478f506c26046cbda517074
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/552-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3908-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3908-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download