Overview

overview

8

Static

static

3

2026-08-21...kl.exe

windows10-2004-x64

8

2026-08-21...kl.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    21/08/2026, 04:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-21_472d03c138ec07cb08f988ec8de75eee_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
  • Size 24.7MB
  • Sample260821-e9papshf65
  • SHA256 ba67ff792ca50104786013476f3a1cdd72fab3a655678b18571c1d77dd0765a8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_472d03c138ec07cb08f988ec8de75eee_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-21_472d03c138ec07cb08f988ec8de75eee_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1816
  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_472d03c138ec07cb08f988ec8de75eee_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-21_472d03c138ec07cb08f988ec8de75eee_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5096

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 25.4MB
        • SHA256 f70feff8e00f3747a54c5095cc8f6e268f8735439fd7b2dfcbd8d06aafaec9a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 24.8MB
        • SHA256 6d10b27753627d381d0b937f83abc62787c92fc436213eff097babd6eff8ede7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 55.4MB
        • SHA256 a83209a5b769580ce6f34491ccb75ed54582991ac0da3441b86ef84fbb38b2c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 51.1MB
        • SHA256 12588bdf45c760191290a5103869608696fba8abd736798fcfcc2c3bdb49b411
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 52.8MB
        • SHA256 0c8ded9b40c45bc1f7c55e0ceee0670de7e985d3b9ce81c13f098037be27c959
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 51.6MB
        • SHA256 bf941c944ac58edac2baf5bb8fce9fb45ac4a90f5d37d620cb49a2d02958b4cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 51.0MB
        • SHA256 a9fa1346fc67fdef6108b1358bc6a3988ad0029e5e553e1b3ea511440131b9f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 51.2MB
        • SHA256 d3484a5a3e303d377ccf4de6a8109c5ba7ccb243e5bb17e7293222448beaf4f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 52.4MB
        • SHA256 1ca678948673a7b2227fcbd21594cf1d7f1909f5c8ca13ed766bf09d9d0a5ba5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 50.8MB
        • SHA256 38ca5fb0e2d673f9a2e9d3232f60cd62a6bef3a2b76f9b8d8125687fe55fedbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 49.4MB
        • SHA256 f4dbc10efcd20777addb761aa58bdff069bb7a61ace9e3232e87933e7b26dae7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 49.4MB
        • SHA256 08b41ab0222fabde93f8ae607612bf70ae2435a064fcaa66fd21cb3b792409f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 24.7MB
        • SHA256 75b7f18e50ad777e68742ef120958a427da199f167f26a4c6f35d15cbdf8f090
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 49.4MB
        • SHA256 eb3cdc0e995bf91b7642c93a9e81ff3a2a4fcfd208ae3c2df4a90ac4553cca83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 49.4MB
        • SHA256 6c3aa5ce2be9b8275e73075f391e597fc18860b37ab3a70d97c07e5c24c9d04e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 49.4MB
        • SHA256 43e99ac04ff8542517eaef76e651630deeabea108b443060dd0321e7ca440023
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 49.4MB
        • SHA256 8cbe4c0e118605a396c851429d2c1446e43c754c4e5e21e938c065249df7d0f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 49.6MB
        • SHA256 a1d5bde9156f0ccc5a9bb322fbe6a23cb4fe578c918e4761bdc64f7fb7417fe6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 49.5MB
        • SHA256 54ec96f14ca1bd76e68e5749e9d8379af012ab244cdc311e3e0dd2c9c4daca99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 49.4MB
        • SHA256 16b641e95fc2280c82397157739cd6b28df8ab03ec7bc1b3f10d3b040a253581
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 49.5MB
        • SHA256 2913182001324f94f58e79d2003f4e434800566f8d6353aa104673674afa0b83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 24.7MB
        • SHA256 904797889e706616e377a81ab60d9760f508844e48df2ae48dc8d9c992bf19f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 49.4MB
        • SHA256 69ceff586bb4be8e6c5db0aa09be5423dd5d5d66dcaef3991cc9b9afd70e79ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 49.4MB
        • SHA256 6a6ad19b4d360ee071342b618e2a2fd8afa45821ca273281b2856cf3669ebfab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 49.4MB
        • SHA256 5e59e5a5db4b8fa6ae8ac5ab8813fe79bc1efca93f3a8f42b33294005778e7fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 49.4MB
        • SHA256 981732d8af25a676177d504f0fd4db1f7a62165709f8a18250f8d47fee19fbf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 49.4MB
        • SHA256 9250f1528884cbc1e9e802b74ddc0fa21ff75e0494031ff309f575ea44fb4cc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 49.4MB
        • SHA256 adeff97f1a5b5daa6e26f64d7b624a7906a6f67f2e57b362ed9a522aaca5f7f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 49.4MB
        • SHA256 5c52227e8c4c86d2a3a54890df30c750558466a3aa3bc0920d043d77b1073548
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 49.4MB
        • SHA256 52ebb53a3ab45f5c3b65eea22bfef804af5d09ebf60d758cf5bc339ce45d6f65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 49.4MB
        • SHA256 a961b33905aebca360c774fb385454d555d18ec911860a457732aa9dafa4c22c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 49.4MB
        • SHA256 de3004d833ec1ce0a5c8c4c6e9d2ebd678a828f7a55071aaed358bf8f2fcda78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 49.4MB
        • SHA256 a90693b094a882e27e29529c3401a7c27e1905ad6616fcdbadeafbe65e081ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 49.4MB
        • SHA256 a585fb8962168ee10edb3d5a958a3547a414b5f934b7103451a5cdb94f0cfe6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 49.4MB
        • SHA256 1e72ba15776f2bb98b4c3bf7491def928b5f08b69922c0fd1a75bacdac40a965
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 24.7MB
        • SHA256 9103bc337ad77e98a2414f8b609faf86201115b2809089232524986e0df67453
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 25.4MB
        • SHA256 270304d8171adb8cce4670e074334f33145ae46e7d119b5002732eb5361cd425
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 18.2MB
        • SHA256 b100acb6fc239fe44cae8ebdbd2ee8625eeedb81a76a699acc47b27f3b5a55d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 10.4MB
        • SHA256 4ec38e5bfaa9a7225628328d7e84ee9f20240a1832d56bc54a67c69ad5a0237a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 24.7MB
        • SHA256 5a4c0a85ea63b037687dee6674ad91ed48918a713457b3aab52e7e5071f5ba9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 24.7MB
        • SHA256 ba67ff792ca50104786013476f3a1cdd72fab3a655678b18571c1d77dd0765a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1816-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/1816-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/5096-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download