Overview

overview

8

Static

static

3

2026-06-02...ca.exe

windows10-2004-x64

8

2026-06-02...ca.exe

windows11-21h2-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 16:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-02_0ec7841fe015fd4395f41dfae65802f2_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
  • Size 27.7MB
  • Sample260602-tp48rah171
  • SHA256 7543eb361d75a1feadebb65af100adaa413cc0eee849f2c7ce935e3faea79715
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-02_0ec7841fe015fd4395f41dfae65802f2_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-02_0ec7841fe015fd4395f41dfae65802f2_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3444
  • C:\Users\Admin\AppData\Local\Temp\2026-06-02_0ec7841fe015fd4395f41dfae65802f2_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    C:\Users\Admin\AppData\Local\Temp/2026-06-02_0ec7841fe015fd4395f41dfae65802f2_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2496

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 28.2MB
        • SHA256 a740bcad0b36404b31dff7ad040a8d609e3f474e0260890ed758cf9083127936
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 28.6MB
        • SHA256 a9ab9612ac587fed97d9c8f6d7f441f8a2b6ec2f05bb7958367c6cdde10bc82c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 29.4MB
        • SHA256 8899fdbab385d3ae4041fed6622e204529005a3702d9aa8045cddf9281a4045c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 30.0MB
        • SHA256 e75615d37467032d0fc345cbf9c2595ac2ed12ec61d9f2eb184c45eff7f15121
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 29.3MB
        • SHA256 5b3d43c26417c5a03fd91aec551ef519abb18f99833ecd20d9c51018c4acee9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 27.7MB
        • SHA256 24e87e60b1580daa24bdc39252a4f95fe93250bbb8b1f6e670f661980594ffe6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 27.7MB
        • SHA256 14bd033a6ad78c83b8b625120f7b2961c00d34ffe866b8f7ebf911e226d8e164
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 27.7MB
        • SHA256 3099ae81a0e129f2a2a51040489e53498b16f0e564521cc037751ee75d154faa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 55.4MB
        • SHA256 9d734aa73b551993c3962dc238675517c50cc7feea3fd3dbd614abd49a01a12d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 55.4MB
        • SHA256 3f875f0bb68f5c50b05a5de53004c2cfa98c9d30ce4dd62a92c1dd397e978841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 55.7MB
        • SHA256 f0b4a7e053323c6f3dcc15a3d3b21038d55c928481ddb33d92f3baefabebdad5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 55.4MB
        • SHA256 d4692f5039f8a46eca2b6b0169044b0043c61b7bdb9a084b7f0031f3f2f4807b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 55.6MB
        • SHA256 458d6c407814feb5ceebb58a0e31c81ad60212a14ce2879070fa83ed5653cc68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 55.4MB
        • SHA256 0cf5d8fde1f775b9a890a0937c15bb7407fcb66fc44c425fbaf1de473531e97a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 55.6MB
        • SHA256 568286c72735cca4258420a204015a185df1a9be7f6668fdca23d32e3263cd29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 55.7MB
        • SHA256 ebedebe8710daf56aaa1c132312f2800710e48e4e35b28d95a3eb3eed56a89cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 55.9MB
        • SHA256 9d9fa7e25d1557ec4ebc2f5abb0220245eb5b6976f0b23976ced55767f19317b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 55.4MB
        • SHA256 d5537eea90d56f6addb8032656f88b8828b278714bb138f9dd3dba4feddccf13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 55.4MB
        • SHA256 81a6e654f15ef8bfbf519d67fb789a3a555cf43a0df2fcbe43abc111dd30be23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 55.4MB
        • SHA256 3547ded726361d7d26480135c8ccfeb5c6e0b39ed0b38492b10ab923b6d3c250
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 55.4MB
        • SHA256 a91af71ee85881b7fecfd0933a83370999345998013430409e0ffbd17787f223
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 55.4MB
        • SHA256 e76b8382249720fabaa9fadc8298a6a6abf12692a0ff5099a705ef3775130926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 55.4MB
        • SHA256 dbad507361ae6d6dc658df351c90bd7d9eb4df7648c593c4a4a5a2040de0fac9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 55.4MB
        • SHA256 824b62fe3972d44bd33ff7c8f18636fbf33eec7977deb23cb1e89aedc77ed122
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 55.4MB
        • SHA256 5236ddf59cac8d7e812c2d6bcb4c426eb72a677049086a4b0c367ee56bf28c6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 55.4MB
        • SHA256 e0bfe0f6cfe0b0b55c07ab9836149400f8c00a9fe31b34abb18ef1ebf764b944
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 55.4MB
        • SHA256 88d07c6f7a808d5fbdb2d43cc3f80b7d0edf805df3687cc4b821b9df02692590
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 55.4MB
        • SHA256 8f7de88bcc07c1639792919a17c2790efe775230ea4ab502b9ce1c3b4d317240
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 55.4MB
        • SHA256 54ec77281a1c000f3be1856e05830d0373d70037f2bd84da5a21948fdbec2cd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 55.4MB
        • SHA256 3cacbb2a4355e2b0d18da0fa34bf3e4075bca141d64cc34277e863a6eac06217
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 55.4MB
        • SHA256 376b95fe0e43724d59348d4e289e746d7b3481b1f9bfde949b01c205fcdd84e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 55.4MB
        • SHA256 5a0ecc2b396aabd10094bb088b5b6e0fa50623c8a0be75a0c0e19a8f32d6cc4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 55.4MB
        • SHA256 e56bffb8687e6fb6bbf759e0a6ea1f5d822e2ed83dd7a745bfc3e83552eb00d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 55.4MB
        • SHA256 d8fe24c857c4857d38ae25e1dfacfe2eab0941b4d4d36a7ecebb74eddd6e1163
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 55.4MB
        • SHA256 a43734e2c9bfcc824a1f288a86a9f335ad4dcf396bcd1edbbc81cc7ea0166e98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 55.4MB
        • SHA256 02031628b351b646bf8efb16cbe26aca153250a26778066ac2101cedb45ac645
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 55.4MB
        • SHA256 5ae5f24053020ff6909148d5c6c44e6c90d341fbb0129acd991916416784872d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 55.4MB
        • SHA256 bbc2295aa905a96edc40834f1551c57a1c20dd9367707f35d952c70a2a95db25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 55.4MB
        • SHA256 09b7e3ebbb925fb8b4e3dc5844f0c4694e07919125e43e6977add7598573c3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 55.4MB
        • SHA256 d03a3274b6aa6600bba6269d017e72742b55b51b332f2f23ee9def7ae6c6eed1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 55.7MB
        • SHA256 6de8adeb4ce7747bf5e7d9f196d82cde534b217f94a201e5c9b10430364d1472
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 55.5MB
        • SHA256 111bf235967340bfe08335792c792adfe09bdb992fe2a420236a3084c29b6d19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 55.7MB
        • SHA256 15f12d783f971f3d7beae4410d068ba98733e4c0da0739ea739b30abe1326319
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 55.4MB
        • SHA256 ef3ff73bd717da0fbbe5c27252d4a8725bb9ee419188070b891bc00044454896
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 55.4MB
        • SHA256 80d770ca2ce9a43c8ae3208dcbb40311792ce9001533bf4789b98d1a0807ccc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 55.4MB
        • SHA256 5d8f8a534ca70c1a063a5a2b177afb01e172fc220a3191fe85c1243b56c1c1ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 55.4MB
        • SHA256 6d064fc50a1556edfe7aaed20d7cf05f3f281d8ccd1f01cc256ab680ab99f81d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 55.4MB
        • SHA256 859999c2633f548dcc6c8fb97e585860a0475dafade32808497fe1f2dd78e0d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 27.7MB
        • SHA256 7543eb361d75a1feadebb65af100adaa413cc0eee849f2c7ce935e3faea79715
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2496-51-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3444-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3444-40-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download