Overview

overview

8

Static

static

3

2026-08-20...kl.exe

windows10-2004-x64

8

2026-08-20...kl.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/08/2026, 05:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
  • Size 16.3MB
  • Sample260820-fps9labd93
  • SHA256 8fe061a723b3687c16a0b13a9f04b09e95df4d5a8c45659469a4c82af8328759
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3440
  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4148

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 17.0MB
        • SHA256 67c6883918ff145f119eb70c31294b3054fb28e32559a46056deb47f946d5b39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 16.5MB
        • SHA256 5be5983126b2cf588fb83d8020320e485e882957ed97c46d0b54ddd55ab38a22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 16.8MB
        • SHA256 6c7c7135379034f88ceff22a2b2f3f1a76df7057a1909219c4b2b404b2a125bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 16.4MB
        • SHA256 b824cb5595c9af7730c6be65b7d084aa921e94e6c6305e19de06c1050ddcf0f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 16.4MB
        • SHA256 01782d43bdcd1a267d6d194cb3d8f74ea8860e0312f2a80ed09c5156f09c19df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 32.7MB
        • SHA256 d9151d43d1d5b097cbff671d12d2729a9704c93fca34f1bcc9fd7899fdbd9cda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.7MB
        • SHA256 0e797336172edfed5287127f3aacef6acacb686843fa898a98f6e440ffba2043
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 32.7MB
        • SHA256 519071cd79d28e6abc7012a961c7406bdd2ede77648b96e62e4372186b8995ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 32.7MB
        • SHA256 ac09cc069924a4d797ae010db78bdc6db9b0b1fc086936e9f0a9747be75ce04d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 32.7MB
        • SHA256 46c6c4c65dc113aae53f39afa1c0dc9693b91d90158ac01ddae075a5e063a055
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 32.7MB
        • SHA256 5e7be391d7c8c61dcd4c744e9c39f58f549ad804e30a0a41146ed197a2cc0bd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 16.4MB
        • SHA256 857b2bb52acd7b1d5ca5b4c72270de5405fd865cc4555d08d5b04eeb6ce9cad1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 32.7MB
        • SHA256 e344c283538e590a85b8f3de771b45f3d85a176f3172b48bd3b6d362e307a0d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 32.7MB
        • SHA256 865869a67c94a18e6e031ef66f250e94c356d859fb5a7ab84d6c7b544b554ab4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 32.7MB
        • SHA256 e11aa9ce77192d523500243385ba15cf20a95e78b5a927899f822dfdb1d8a5a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 32.7MB
        • SHA256 1aebe21a477b297b5b9e995cd587416fad5b3da1ec94672f161a032e76e5b729
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 32.7MB
        • SHA256 9b2f37ef8e9e496ad79e842d55745591c0bc48098be60730362213af8778dd6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 32.7MB
        • SHA256 7bbaad93e8abf57b651e2768e24b05d350654ca78fdddb5fd97326092f8ffcea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 32.7MB
        • SHA256 a02bc0eb9fff60b0f76ec2fe2666a1d26ce8f8c8e1586352af668b6acbcc1cc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 32.7MB
        • SHA256 4c45771fb7df3312a137bac565a01711bf25c46ab6086a48941e0ff4e7d1472e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 32.7MB
        • SHA256 735ccd1fb463393b445b8780ee42e42b547b9b13d3e89c39d392dcbf717a0e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 32.7MB
        • SHA256 5c85bb11c31819954866d24bbbe357dfe3320395019819fc78a18d9f5377bc55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 32.7MB
        • SHA256 388642656fa241d1e94845d120b5c1fe7d5f26e8e2c7c0716e8c2026e53cb5f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 32.7MB
        • SHA256 937453cd3d1a7e83b608916040e7c2f81cdc31c943270e222d052a5c9f13bb89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 32.7MB
        • SHA256 55ce7d758863dedde42e43fa807bb36b65edd94f13ba8a6cf35ff462c69b25f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 32.7MB
        • SHA256 cf2c4167797c9a09933f70bdcd791b39bc8fa53835ce87da2ff77e30da59d98c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 32.7MB
        • SHA256 0554fc15b8f91c7fcb69a2e9723046cf2b8fe7575c38631d09db3eb17578e2cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 32.7MB
        • SHA256 89974bf0a28735886138b291e3b0bb10b1c9d9d793cf1c75e4395cb5113c09bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 32.9MB
        • SHA256 7357c9a1af0ff0e7535db1809474fe81552acbfecb1bd6e8fe52beddc6ab5888
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 32.7MB
        • SHA256 4c959f804feaf8aca228543ce7b43a5ccbf5ff094e159c5538db3a87de959fd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 32.7MB
        • SHA256 43ddaf73a6650afa60e73ae677773d659a142ccc12d6f9652bbfd4292270aeca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 32.7MB
        • SHA256 91ea545a19e875fc0291913a48f359eb0a5532d0e86f987119d11aa1cec7368f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 32.7MB
        • SHA256 cd84fcb92eae9ba5ed44312834f1e2f63af6ded80c3a5483059c3f7423f8d83b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 32.7MB
        • SHA256 2c805f135b3c82386404a69145d5e1c63225fc527a52d7abe464a751c7329c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 33.0MB
        • SHA256 5777faed2747891b3f27cf1e31b25de558e9d10850c010f2044a07b3a40393ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 32.8MB
        • SHA256 ecfa317a0d402587aafc4741c8b7bb6658af814f1d3d3d88d5c74f9e79836956
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 33.0MB
        • SHA256 af3c0d3c799c498dec65aba9674230d086a109065cac6b456ad7912218aa07b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 33.1MB
        • SHA256 97f31887c5f208cfe5b7b482690511d5d30255ac42c0284a1801d83eb488d17b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 32.7MB
        • SHA256 d677dd849c2bd36c6d96f2a97cd0be0357259b2e8315948bb1c8a809f9297e6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 32.8MB
        • SHA256 4176b178b5b68aaad444d5acd160d6f1fcc2d97dc3165f14ea96245f08955e87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 32.7MB
        • SHA256 b4a56596ed5596482e622b7036b9054592908ff97264daf82d1577b0073a82e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 32.7MB
        • SHA256 b11eaa40f4e5fda27f897de65be851d56c234ebcdc8cad4694aaf0edd6bcfb24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 32.7MB
        • SHA256 4b952130f331720cf4beac3b75e50739f4efa488a48e219dc6838d18f7a0c578
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 32.7MB
        • SHA256 790ab9a96b738809d94086606a2002b95bae18e3a837dc9982dc6c5d0ea4bbb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe
        • Size 32.7MB
        • SHA256 2394c390d923b946ebf15c3652b1ba1c88ff2ff3dad67090367453eddec0b825
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe
        • Size 32.7MB
        • SHA256 810d92101a68769eb3e960c2ea1a02347bfe4c61f9841e981d6512d81515fb11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe
        • Size 32.7MB
        • SHA256 c4b8c3f5d56367277603104eb5025d124173c1f95336f370adc2be160a25bfd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ssvagent.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe
        • Size 32.8MB
        • SHA256 f82059bffa5a635d897e52339189c519b9ada724adf59732fc92154a65936f79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe
        • Size 32.7MB
        • SHA256 2f18dd8a9d07d5c3d741798995aa63c0abe2ceb6d35deeb62756d4dccb0cf5d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe
        • Size 32.9MB
        • SHA256 edccd7b55a4ff4d70e9b8a9a5b4d2a472676336aebde5632418dc5da8247a361
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jre-1.8\bin\jabswitch.exe
        • Size 32.7MB
        • SHA256 3af893cf2baa779d92269bf9d5df1ff0a85503d6ceb667f43802b988524eae0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jre-1.8\bin\java-rmi.exe
        • Size 32.7MB
        • SHA256 8f4ad4691ddd1b12985be3d793bdb737a7f1bf8074c623b6cd7764c08c0a2313
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jre-1.8\bin\java.exe
        • Size 32.9MB
        • SHA256 d12aa141168833b9192221a36e261be9a793c4f1730404a479cd7136d63b8071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javacpl.exe
        • Size 30.1MB
        • SHA256 b8d471a62443a489311790042ccd6c2589415f6895141996276b3f64b420765c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javaw.exe
        • Size 29.4MB
        • SHA256 2882a36ea7e762fea653853131c7c8550f60ce08f1d0400f9cb8f066772e36ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javaws.exe
        • Size 26.6MB
        • SHA256 c598d5c1eff80df86df77d46da6365a61598560e94f90005f0d88169f1865213
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jre-1.8\bin\jjs.exe
        • Size 26.2MB
        • SHA256 ccfba2b96100b1b5fefa0accd68b8b84af83c465bbec731339482954a1c00e7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe
        • Size 23.4MB
        • SHA256 78642901921b23286808c61723a84fc3c2d4f6a97e47e46a8af5e81678b9706d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 16.3MB
        • SHA256 8fe061a723b3687c16a0b13a9f04b09e95df4d5a8c45659469a4c82af8328759
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3440-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3440-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4148-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4148-6-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download