Overview

overview

8

Static

static

3

2026-08-20...r_.exe

windows10-2004-x64

8

2026-08-20...r_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    88s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/08/2026, 03:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
  • Size 21.5MB
  • Sample260820-dr2mmsbb75
  • SHA256 f31a092c28bf64566efc6da0f5f03003f8e2b1730be4354726ea07f76cb52c31
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2580
  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1188

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 22.2MB
        • SHA256 9de1cb2a9bfe516d6966f99bb0de4857d1bc44d52ccf0fe6fe9e2fca95a819d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 21.5MB
        • SHA256 d529005ffab14e3fdfaeb8e354ad905cca5149c8d82c3ce683c0b6c80b2d5933
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 21.5MB
        • SHA256 6502c5102742c555ce0ea2b023eda147be0ddc82bd374f911ac235501a5370e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 43.3MB
        • SHA256 6aa42f48770c4777c59f1c56ddf74adfe807a7d5fdee624069bac06c2459d4b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 43.0MB
        • SHA256 502201f05827b12b58ff459d22f318975bb0214813d62fc9aa72477cecb7a38f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 43.0MB
        • SHA256 06825d157f16b36e3c94fbdf86e7adc638d0945fdfff485e649039130a6783bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 43.1MB
        • SHA256 f2e8aa7635707e9e118afeb80c3786eb97e536f7b08744bc75b000d6b51305be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 43.0MB
        • SHA256 9ca1bec2b9a1e549ddb87284a92d57c741d80f076bdda01e78ba2d3f83d6e4f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 43.3MB
        • SHA256 8e4ec162a0e76567217f5b99fdce3dd10280682bd52ea49cf6a34956a6ef9abd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 43.4MB
        • SHA256 e8dfe6e9871b75643191e99b8e9d28cd929d3a2921818e27f2a5ed39e7e6a984
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 43.0MB
        • SHA256 915828740afb510090bfc6c9d2c3cbc1c0bb7818702bbe15d8a715796f9b7390
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 43.0MB
        • SHA256 16adc2b8e6fb93b8d3f0814d6b11cbe5314e82155086c084ccd350f3881b1462
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 43.0MB
        • SHA256 a4319b63f074d6de536e1e56b29d46eb02395b185449a6042ce788a04f104572
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 43.0MB
        • SHA256 381a946817605ac27c4f09fc8a8783a9d243a449b9a585d207cbe11a9e6c0495
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 43.0MB
        • SHA256 26c3e1b51d0022629d5ace068f69f823c44ea3f8205b399ce21ef7ae3158bf4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 41.8MB
        • SHA256 a37bf136f78c6f07eb24a1998c678a49bf37e5717e027e14b0fcd887de80c68c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 39.5MB
        • SHA256 7a150bad7ae6ce3f9308b6b11f867823de84e6198f0834f67826c2a8c7ebd5ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 40.2MB
        • SHA256 496117191e629144a9ece4eb90e0afdf91969a9a0b9202a7e699db1bbf705006
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 42.7MB
        • SHA256 9bc4c30aaf344fa67171ae8677e918ee111b27ab7c9ec55c5c80cb3bbf98044f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 40.7MB
        • SHA256 a583aadf080709729b96c4184c13d90912c8d08ba86e67b34bdcfcb0bb8f4464
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 38.6MB
        • SHA256 1f4beb748b039fbfa41f53ed672e2c6049efa663656001d0843cad2a9f8b99b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 37.3MB
        • SHA256 7cb1a95f835f445fcdae91a501565cff8b647ef193d921999eeb1b5569d6f52e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 39.2MB
        • SHA256 b3ad8742b0ff4e444b6409d80cb27154c9f0e12f66d313c1d70171966172819f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 37.4MB
        • SHA256 e503b96333c11d2b45cbf54856f1ba51ea62030218f2d2e47b85be7c5bbdad68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 35.7MB
        • SHA256 7c1c79eecc37c946f128c4a5621a104c1bf674857d6f6c0ccc41442b3acd4bc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 35.6MB
        • SHA256 ace05119687f1af633bb1feae37d3d5a1b0d51917d3ca9a73fd37c089349ce75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 34.9MB
        • SHA256 12f4609aca9132e1b5d95b6ddd8370515c59a089eefc130c50102397f743fd5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 33.6MB
        • SHA256 e63ba70ef9bb1c4710ca65092c421315a9bb4f396b3434d972be7d2e2e071681
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 30.6MB
        • SHA256 9eab524c34f59d5a6db54daf798bf906f5c11275388f74f9ce8229c40e921839
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 29.2MB
        • SHA256 f7045cda2491eb018e319a699096d8c86c34457bc1f9be8ce94bb154eb599938
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 29.4MB
        • SHA256 370b946e814a8f285249a69dd16de5de6473e6c5007cdb236639c489114269b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 29.5MB
        • SHA256 b0632b993af06e67dfe20f14f2e8e45b79c5b2dc3e2f548db449e407cf25af3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 30.5MB
        • SHA256 2403d83b48026791d9cc155a9718933fc1825ae71a4f519c9e15aa4da6ca03bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 28.4MB
        • SHA256 f421f8102051bda84b86e256defb3dad0417d6137e92166eee524dcbe007c8a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 29.2MB
        • SHA256 b365f90a726ad89d02f7100c38195fa3574faeec83e454937baea8757db9932c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 29.9MB
        • SHA256 e4055988892ffbe3db74283133a97d7482d9497e86d4a8de53f5dab9a82f1795
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 29.3MB
        • SHA256 1fdb8c8730a65c7266571995456fa34a157571b0ccd8bde633a9d9d197296b32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 28.8MB
        • SHA256 70f6b033e0ed7c8d067d8df618918b38fd07972ce1ed4999fad3be587173196f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 28.4MB
        • SHA256 a712414041cadb4a3ae6568573275b63529999487bb35d0d01a242e6b1e742a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 28.9MB
        • SHA256 eb293bd04179dfa06667f81692e4f76fe9cb25425c9ddc9490f657f84e58bba1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 28.2MB
        • SHA256 e101a6f3926d1de1adeefd09ab8485175c50f6981b3c6dcafac7fe726d2bae5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 28.6MB
        • SHA256 dbc15901af69d537d068297304d7b10d7dc443bd46593c5876c6df19d98d151b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 27.4MB
        • SHA256 90c2a884e04ad09c6760e70d8a9754598b5df2e9fa2cdb64aba18bab0bd23c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 28.0MB
        • SHA256 f9256936c3becb72544bb58835e9483840b5cc70c20e0532afc0dd4f7c90d587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 27.6MB
        • SHA256 2ab6685362140652e1d78df55b9915e84f73db766351ab7e6f3ecf78b89cd9b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 27.1MB
        • SHA256 890264daf751a21d3cc6ffe43978313c10f5089aa22122b5a6688eed8e393560
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 21.5MB
        • SHA256 f31a092c28bf64566efc6da0f5f03003f8e2b1730be4354726ea07f76cb52c31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download