Overview

overview

8

Static

static

3

2026-08-13...ij.exe

windows10-2004-x64

8

2026-08-13...ij.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    32s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 08:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-13_cce6e01687b0b1ddfd6b564a15b9166e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
  • Size 30.2MB
  • Sample260813-j2dapatwft
  • SHA256 1b370a8740f5791fac64c5b69aab5e0f58d9776046fd06455a8ef89a082ca592
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_cce6e01687b0b1ddfd6b564a15b9166e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_cce6e01687b0b1ddfd6b564a15b9166e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2192
  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_cce6e01687b0b1ddfd6b564a15b9166e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-13_cce6e01687b0b1ddfd6b564a15b9166e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BlockLimit.asp
        • Path C:\Program Files\BlockLimit.asp
        • Size 30.9MB
        • SHA256 ad5d2251249406ec06f6936b811e14b562871274486af11169972a9e5c1a0354
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 32.3MB
        • SHA256 01429b489c7829383e32e309ef97145bfac7e70d1a5aae12585ddb6b7094d157
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 30.2MB
        • SHA256 1b370a8740f5791fac64c5b69aab5e0f58d9776046fd06455a8ef89a082ca592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 41.9MB
        • SHA256 6a11ae11433f84e269f87c6f3f079454f5c93fddfe20f175c5dcac08a430434a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 42.1MB
        • SHA256 b15ecca767654aadebe7f8e7c22cd4ce2a9aad7f965ac4b9bc25d479b3eab819
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 44.2MB
        • SHA256 21dac48352916cc42cf93737c2c2b761f4bfb19a5a0f25c5662bbddf58817b0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 42.4MB
        • SHA256 446e593c7f869cc28e9053c186fb796865b15f6686732bd3016daed1a517762a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 37.6MB
        • SHA256 726acc9f64aaf04c8ea4ba2a93fa801b6d0f4b15471d83fb65a46fae4486eddf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 42.7MB
        • SHA256 fd94a83a356826091f976adf3928ddf5e3ca3522de73096a33f1085c2bdfa937
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 41.3MB
        • SHA256 67097ed6eb214d85a3a7b971cc28b600ff3a8b4e6d4dd2957b41d3aaad97160f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 37.3MB
        • SHA256 14c10bd52060332ece697dcc8584bd3a1f288f8ae77896977a7b5bd3318f0b8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 37.1MB
        • SHA256 71d8664bda1d6ca74bdbecd9a7af5c3a53383cb0bdd45543b92cc5edc9cf3bc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 40.7MB
        • SHA256 b9e045d470ab3158fa1e228b45dca993b6a4619a7c0ffa0b5fe38348405835a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 40.1MB
        • SHA256 3dd6328aaed2d9935d0f8cf772d722e1d03ea519c74ae52a9ad12b908ab77043
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 40.8MB
        • SHA256 819bd5d9f61aaadbf36c712204fc5384d493742b97d79952279476289593f756
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 39.8MB
        • SHA256 2fe643b01f9a06c8a197e8cb974a793df392fcc8f85f0b1d410e7e1fdc9899e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 39.1MB
        • SHA256 1d070b6d4898c8516be23897fa083df77485a6378fa507a881a850729f7841be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 39.1MB
        • SHA256 dac9ba7d6ddc813a146a2d832aa0d54977ee9f5cb49e8aaa64d80e33fb1859ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 39.7MB
        • SHA256 43afdbe37e59d7da29c88c9bfbb393f357899272160a45a5349b012871c0fc09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 39.3MB
        • SHA256 3e308876d06ffac351e9049b5deb5b4e9663b783a775e40ffe2324c7c31fd3da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 38.8MB
        • SHA256 e20afad48e9d74dd2e8c68900d1567eb68c50acc3ceec55ff8e1fc7ce637bf33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 38.2MB
        • SHA256 25a9d1f9ae9b140652944ae0edb14cfbea98bbd65861d9a94a125d5e0c2b8890
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 256KB
        • SHA256 6adff2403606f3fae51ba272308ce91c8124c63f116c3d886a5a38b4ccbce497
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 37.7MB
        • SHA256 e35a8eabc2fbee4ca7b11b5a55684dd3cfa466d82461ce89ac0788e356128201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.9MB
        • SHA256 f7e5a763cfe5743c785f7ba3857610348d8e3d15db9265f9d75ab15f5208c548
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 192KB
        • SHA256 56d5b720b4307ef448fb38ef6495ea0a6fb25e8bfa8f9c140729b820c8e0cc1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 35.4MB
        • SHA256 836205aac99ad2e23198920e9c582538b28fe2915a0510056b4b097cc19072bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 32.9MB
        • SHA256 dcd5f7f930c256a13d6b9566ad44a14daba8530e1a73d137768417732d84b74f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 36.0MB
        • SHA256 88acaaf260c4ed8a079e6c61a9c205c8d8eb0e56bd2d44f5c366f5725922d75a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 35.3MB
        • SHA256 7966fab4a4382fc24e972bb71ac58cd4c9f1510b8c6d5465e81344533fa4875a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 34.5MB
        • SHA256 609fbcd829894c6d7bd3af57c28c7e85221ca3d65af08841931d233e555cd5ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 34.9MB
        • SHA256 3e3db2c5b9e6e51740ce7f10c6d881b6dfc7fecb332eb26ecad1310448d22a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 34.2MB
        • SHA256 575b5fb024b4bc911723dfc00dce3f6fdd13124b9524acd60878c6e50d90a2c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 30.4MB
        • SHA256 d68c397e933e7c1d84714b4a827dd5f27a9e6dbc914965c51461b035d7aed0e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 34.1MB
        • SHA256 e9cbc4813622b8218b629057a69f46160764ce5a7bed76d3d92d874a0532cabe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 33.8MB
        • SHA256 40acba164dfa4242aacd5712721dce688606af4f9c90b62862f6a3952f265861
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 31.6MB
        • SHA256 9f72eadbd8e508599ce9fc4932add0e72af474774cb66f2a09e5cafae6dd51d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 33.4MB
        • SHA256 058a97f005f1f2575b5de52ecdcd6757254bd34f6089f46dc6e7685c1a5fbd90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 33.3MB
        • SHA256 ffb96bfd62583e9455e1bec12f5380987cbfe9c5a95b41d9428511d382b5359d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 33.5MB
        • SHA256 a3dd9123ba65eec1477ef43785fb10f78307bf133da6ceec3d13c762f8c66d68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 33.2MB
        • SHA256 fd52d168641d22789cb7d6f52a8224cf78dcacd2643cb9b55e5da6729ca30e2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 33.2MB
        • SHA256 fa8264e1445141468d558bf141af119ad0f146de948dd57ce304cc58ada6e363
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 33.0MB
        • SHA256 d6c33d041ca4c8eaf4cfaae6424e2e314ff0b7812dc661f6ba476f82ab68bc7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 32.8MB
        • SHA256 26a7c4ed2253fb6633efab7eaaa88360fbfe11d86fcabea24c862936196ba3e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 32.7MB
        • SHA256 01b3ade48088b927cdcd2b41b6e3ab12a9dfde0aec3f8d6315c10561d584d159
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 32.1MB
        • SHA256 ecf47078216b8b8628deaa6f082630afb80fccf696bb1ac5c509165cfbca0ccf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 31.9MB
        • SHA256 bec35dd4b92bce8de8664d1f953cdb46628103a3a5485f7a07763d9a0ee85ced
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 31.6MB
        • SHA256 7053900c463b3a50411b9b38c22ec768aa868c0dbb80914f5d30caf5e42a4e51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 31.2MB
        • SHA256 7c197153fda93737e4061bd04698104e771b5537c0330c4d2037d901937b3584
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 31.1MB
        • SHA256 77ed5ae80e7618ffed985dcf233ae05ddfa64abb3a0676f01f19784159991d73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 30.3MB
        • SHA256 c964f1f0ea30a8a79f1b87b30cc9715cb5844a5e45ac3b6a72748a993a7ccaf3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download