Overview

overview

8

Static

static

3

2026-08-13...wk.exe

windows10-2004-x64

8

2026-08-13...wk.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/08/2026, 10:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-13_0697d221fef37e63e0e34fc699f15583_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
  • Size 18.8MB
  • Sample260813-mvb1tsfp4w
  • SHA256 8984d4f518840fbdc90804c12dc24051c4c466959cd90fe3678dc68b1737a34f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_0697d221fef37e63e0e34fc699f15583_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_0697d221fef37e63e0e34fc699f15583_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4796
  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_0697d221fef37e63e0e34fc699f15583_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-13_0697d221fef37e63e0e34fc699f15583_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4700

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 19.5MB
        • SHA256 928eb6126cd1e70409158aa294e6768ec8e2b520b7ec917fe827711e5a49a59b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 18.8MB
        • SHA256 7a5630450026d2edd373e9ffe10a03976c888223b385c4842b15a1a3ebc99383
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 18.8MB
        • SHA256 826218d214828390e5a6b815d25837b4670b7176983981cdc7cd7ff43dbfbfe2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 37.6MB
        • SHA256 bdc7b764a8c4a788eaaed9c7541eb7fc91840965ce28fcc7cc01d5c8115872d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 37.8MB
        • SHA256 540d68217ffc54b0b7d55d60c58e399c139d30b360255e97a859e0fce0a3bac6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 37.6MB
        • SHA256 edec74f6774a4c84dff25f70a09e3cd0f73c73e0edd9b92d7ed68157e6298b0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 37.6MB
        • SHA256 70c5e46766473aca142b169c0338187fcf90061acf49340b383d3898c8b2d39a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 37.6MB
        • SHA256 31534f6bf2db7f68e8067a69c20f32273cba560c2a766641370e861f7625ddc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 37.6MB
        • SHA256 7bb01133bae4c3a69a2d4d5eb990b607af9077377a30fb8728fb0775b90e1732
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 37.7MB
        • SHA256 22a4fd122ebe938815d861ffa4e6aaed092fa26e200db0d9f8d53a8833325f53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 37.8MB
        • SHA256 fd2947c3831b612c1b4d5f13c5381c34a0c83c63d52a065906baa065ff0bc7fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 38.0MB
        • SHA256 23d2e42f913ec055295d828936a10ed14a7fc0ffb337be2ddafec3eeca069b92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 18.8MB
        • SHA256 4f2e941967fcdcbf44445d5645e378cca8762f25db8e0c40f6c0515cef2f21aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 37.6MB
        • SHA256 0e05afad26cfda6005237caafbff80f37539f96568af456a4260d49ae99d83ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 37.6MB
        • SHA256 0991293021a01a0a77148a88396bd16a8f7fbdeb01b4a787dcd2ed27f4c7f1bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 37.6MB
        • SHA256 b26fc2901434054e758f7975a63f5832a7783346431920ccccd50916f03496a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 37.6MB
        • SHA256 46ad94f92c3e3870a4902f6c2ce541f621787f3a1c83a34bd74664de28fbdb48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 37.6MB
        • SHA256 85cbdafc51654e089e72e294b51083fc030754a54e7a8ee2b1bd63bb3dc9f9c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 37.6MB
        • SHA256 b000ade25af8e7064689b2cf6eaca1d5f874c732bbe030f66f4acd10c75d995b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 37.6MB
        • SHA256 3dbbef7bee569f360600ac62831ae5ffcb41fffe17b271e19d962b20be4aa967
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 37.6MB
        • SHA256 4b9d7cee8de643a3b07d301f493eeb7a8adc617f15f5798d9a343da130d650ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 37.6MB
        • SHA256 c01fac11b606d869420bb69e18da632a086ed90b57f69b54130b16fc25d15a6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 37.6MB
        • SHA256 1da9ed735b4b873baa59024f0b430e03652a02b920e64083d1a086c9c836af0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 37.6MB
        • SHA256 5cb20a1e54e705a76a6a63219e5d36abe19044f20d47e9bffad55404978615ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 37.6MB
        • SHA256 f77af8db1770c8d52a6768a18e8d62d8fc55729bdd40200d7986e54963b7ec8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 19.2MB
        • SHA256 fe3c73db67eb187837cf920812e7016ef174c6cc9c191e9e1317096a6f356690
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 37.7MB
        • SHA256 0a51dd615e3579e11ba27c746f5a342c90a70513d5fd3d7886e96f3493835e7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 37.6MB
        • SHA256 5d24cd397efff085ba261defa06f2630ccf9cc19d494bc70ca8a2ac51bf026b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 37.6MB
        • SHA256 a611974cfdc89a892f21a3f4af766de27e86b2adc080f891824defaf29f1d102
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 37.6MB
        • SHA256 f84c27d21c08ecf95698ecad70af257e5b907268c28e61e74a68278a8f04cbe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 37.6MB
        • SHA256 ad86ec559c6aa66691615ea34eff2e5c887c96240daf62cc4510ff6e9c5ba9b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 37.6MB
        • SHA256 dca34cf4fb1e12fd5a30bfbad136101d1b51d62bdd1db00a8533a9921c818f61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe
        • Size 37.6MB
        • SHA256 c6276a498504a8efd511d277e0685232f94f26a5a80f2e02b9746ad7e57da4fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe
        • Size 37.6MB
        • SHA256 68d15ce0c9e2548323caf8a4f0ffeced305c8f3734564f13d61a3a00dfe1820a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ssvagent.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe
        • Size 37.7MB
        • SHA256 7356389420d014a1ee7997073f87f8a707010180e5d329b9c42982568a84c091
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe
        • Size 37.6MB
        • SHA256 dff071694e896863d65c52fe2b9042b3ecdfdfaddf5197016b0ef87a187c8f83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe
        • Size 37.8MB
        • SHA256 170ce62db95fae00b7b70445cb057c1cb32b9847d7f7894c42160fa71c75b270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fontconfig.properties.src
        • Path C:\Program Files\Java\jdk-1.8\jre\lib\fontconfig.properties.src
        • Size 18.8MB
        • SHA256 f0c613aec6bb27d36c810b48430cf38a01a4b828930f8bdd078a7c5f986b7c7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jre-1.8\bin\jabswitch.exe
        • Size 37.6MB
        • SHA256 913961247069aa0c4723c88a0d0925537e2e5781d3c42a46740e9e2c090b2453
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jre-1.8\bin\java-rmi.exe
        • Size 37.6MB
        • SHA256 88ac9f7420bd69d205a21e990e061ad5b6063c0fefdde46a35843a58ab51cfcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jre-1.8\bin\java.exe
        • Size 37.8MB
        • SHA256 9840d657340bf809da87e1ccb4af798bb258031f8812ae971367b16da9551138
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javacpl.exe
        • Size 37.7MB
        • SHA256 8195d7a43a75db6ea9a3a420edac0382e1f011aa66bced9f51eaa63756fc372f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javaw.exe
        • Size 37.8MB
        • SHA256 0d53d9710ded9bb08613b791d12f31fbefa15634b2132e1befae40967d256572
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javaws.exe
        • Size 38.0MB
        • SHA256 0925f28a4d5b91a3fabfc5d011ab5c13e451a4883e58bde396b1b8d1c55c418e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe
        • Size 37.7MB
        • SHA256 00336e37daf86cb4c4462d6a2436a0404be513270e529d406ad2b2fc58aee39c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jre-1.8\bin\keytool.exe
        • Size 23.7MB
        • SHA256 241e5a514dbf65493baa35d9b7165f0e345ae67b9135f4f64f50677f3811e665
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jre-1.8\bin\klist.exe
        • Size 16.2MB
        • SHA256 ea00fbf90470fbfd59c35b6ab516820b87f936dae0db82dbf27620e318033866
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jre-1.8\bin\ktab.exe
        • Size 15.7MB
        • SHA256 600817bf160ac500453275589a18b6cc662e7fffe2c31058d926e244e30db8d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jre-1.8\bin\orbd.exe
        • Size 14.2MB
        • SHA256 be8e33eb21509453d261462f4887cbede925ba15e2b7f82e92bfb7fc2c11cac8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jre-1.8\bin\pack200.exe
        • Size 640KB
        • SHA256 36e46251acaa3c1f6ddca77a7802721efdce2c29bd1eb6d91a02a5f772f39704
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 18.8MB
        • SHA256 8984d4f518840fbdc90804c12dc24051c4c466959cd90fe3678dc68b1737a34f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download