Overview

overview

8

Static

static

3

2026-07-02...ar.exe

windows10-2004-x64

8

2026-07-02...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    66s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/07/2026, 07:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
  • Size 25.2MB
  • Sample260702-jsxb7set3y
  • SHA256 79fa7d9324517ff31b725157296a9feb603616e7225d339ea97bb28d72c74cf7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:952
  • C:\Users\Admin\AppData\Local\Temp\2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-02_15c27b428d97a7d139dbcfa4d69747ac_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3800

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 25.9MB
        • SHA256 fc73b3029be3570abdc1380e16c9acae709418288d59010f842b7d210552e1fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 31.2MB
        • SHA256 11515bcc41d5e50e38b7c5ce939e11b15d1665c8d0a58c318d0419a883f56408
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 30.6MB
        • SHA256 0dc2e41fa45cc91316b624b88a87d94ae7d500a2ca89d899e0254a77d36e44d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 26.9MB
        • SHA256 cacf67e9c44ab8851d0b906d97f333e99fc153cc43cfa9f80ded6e295c387934
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 28.7MB
        • SHA256 4ceb204b869fa1ba4ab5e3ba202d7868bfe161208bff69d8c7db5b2750391c12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 32.1MB
        • SHA256 7d70af238d8f5b3f58a480ff2547b61a7973032a67ffc4051ed2ad1741f891a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 31.6MB
        • SHA256 699441459686b6915fd627ac1c8a2fe1dc49f3bcbc75f1c315b517a744831bfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 31.6MB
        • SHA256 ef34c99ce62f1ce3ff4b6b7fbfdc57efb60c6bec4aa76d72d36d6cc17b32c886
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 29.9MB
        • SHA256 362ca12498128e95ed704b6728cb7f37c8ea262dadbbde2a843a5194a2e45ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 32.1MB
        • SHA256 15c1609b83b145640f56b6b6a1c52534a27c48d3e0c201d1434ff833fc204498
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 30.7MB
        • SHA256 b026fad4634ec8a31497d0b008cce7364378695aab82176a2d7a5afb524ad34e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 32.6MB
        • SHA256 dfbb5d215b2e5159551b3f5c3bbc3f4fc7ccf3d3b897c7a82bc03c6805f8d6ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 28.1MB
        • SHA256 45bb595ce3046bfc298753da639ffd1d485bac20bf15601a4a897e542fdc413b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 30.6MB
        • SHA256 cc31107e92ffe21d1c03314da9cba1f86a9e69296802a038b0536617b86ca4c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 31.6MB
        • SHA256 05043986ff16fa807ef3417896c18038a1a42b2c16a5b356f9e0a6c6d9178f82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 31.5MB
        • SHA256 b86dc10558d77997abc6e927b05e12e3e00ad7d31429b666e30cd387683a3d9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 31.9MB
        • SHA256 e50e1274b782a17f9e375834e0b9edca30edb16136dccf2774d4cef82b58def3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 128KB
        • SHA256 43487443e34438846ba103b7924eff4a32e10c362356ffe679e3f7f007a74316
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 31.6MB
        • SHA256 e7eee3b94719b66c322bb3719ee769e07b8cadd15fc4fcb9cbf7d8f7947cd422
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 27.4MB
        • SHA256 8e44ce5beb7749643b493d5b0bc7f2ccba3111c7a982a4e6a49fba23efde4e60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 31.2MB
        • SHA256 f10eb52c2f276e85a5935466b58aee6df0df9edcc8ea3e8661fca9094d2b6d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 28.7MB
        • SHA256 b9d856d7056fa2cce2f2d4ffc0f40356da62ef80715ca7a431ce553271571aab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 28.2MB
        • SHA256 d23b19b05b6574c25012a4e9881e759e421226f5153b93df313725ac4fb06688
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 27.1MB
        • SHA256 9b8375c93aacd7743c61d787fe1a2ea4e2395f27919a9c3b7692270f7b8c73b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 30.4MB
        • SHA256 c26d347932caca85a10c9c43461a3a2a18554848debecc08d5b42e6096567a71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 29.6MB
        • SHA256 aafeef61e3ab0fc2bd4a312931bb59d7a2299953eed4c0897fea424b2039e57f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 28.9MB
        • SHA256 4807d8da17b54562832e7fa04be33325b84124e3a5fa20bbba18f88ecb51747b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 30.1MB
        • SHA256 917839973bb10ea3954ae8d40a0f6120f40d9c467a6060fffa93d02b89dd17d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 28.6MB
        • SHA256 f9b40f129565e95aa8c3542b4edf84f6ab31847a08bf831cdbd10dfac4d30b03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.7MB
        • SHA256 f665a3d64335def7a4c2f2dd63b8ffa62e633ca0f43dc17095058332105db14e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 28.1MB
        • SHA256 d2f201db86551ad3a3ea684b58b13546881691813f26f1fa924e261cfae95363
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 28.4MB
        • SHA256 983dd38640d3aabc29f3ecefbdbdb01ab6611913e07c1277c9c2de35f58d1854
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 29.6MB
        • SHA256 2f20f4eaeb415d8264752f405eaad44ac0f5351aa2ba90cb59363fb41d0b3f7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 26.1MB
        • SHA256 5ee6bc0ccbc193277dcc053f77ad860f26c9f8f3a377ad05d91798da898116db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 27.9MB
        • SHA256 ba42197f079b41dc646fb263fb089b7692cac8431fc0c6263c429c0ea5d4ab11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 29.1MB
        • SHA256 783feb86e5f0d0bfcb6de8184fa81ce7bfcacff672286140d35349dac433cc65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 28.4MB
        • SHA256 0ea3bac0cd3b10705a2c780e051be8fa84b502ce03aee67ed13afd875b10c490
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 28.9MB
        • SHA256 72eaccc52d0e4b3ad22de0a46de690e3327b364f8b1ad93c976b1fe4b32e2009
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 26.8MB
        • SHA256 9f817595ab922145e942bbebacc5ae289fc452ed50582c12addb3a7709f77c78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.6MB
        • SHA256 0796198f7bc967e0d9f5059141ac02de649870a496bb47b471e4601108b9dddf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 30.4MB
        • SHA256 7507ab15b1e973c85a196dbe044ea76277b8efe37005616bfc5dc55f427c0ffc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 29.8MB
        • SHA256 6bfff69e06abdf9919fc093263730badd3481d46d241ae648544fdc5b311d927
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 28.9MB
        • SHA256 57299ba1f8a8183e606012f93ec7155390003d2f7670097348fd9a245765f3bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 26.9MB
        • SHA256 b63563ed903851a457587c885b997cf1d43e29c002b6bfc052e9f7ccc1667362
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 29.4MB
        • SHA256 6ab1db18bda70943af0f0d533e7294f76680efeea1547c61f7037ffd2f3531a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 29.9MB
        • SHA256 7c9dc486001e34f80da02beb58b616b287e09e9ff6f5b10b4147c314ec083045
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 29.4MB
        • SHA256 063b83565b9553250b25a77a8501e9c414ba352b0d22b987715c80430c4eaded
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 27.9MB
        • SHA256 6a15ce71088ebc4ba07e9b40c67000bb5e25e6545a3195d828cd7d1624b25416
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 27.4MB
        • SHA256 f42bfda63c28e80503dcb9c4d9019dc55521609a295f72136d79dfbf961d839c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 29.4MB
        • SHA256 a4beea13a408e5b76c1e33ba0faf2c171db45c6bdf2796543522de587f768648
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 29.9MB
        • SHA256 0c2e6e3d345024ace2f19eb5bb0479794761bc8cab3c1ad9719a3515487d65b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 30.4MB
        • SHA256 d827744b095b1eb23c3334ead6d182853b0735646972eb0bd6f9983fd86c9d8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 25.3MB
        • SHA256 4cdc0fcf9ca99de618046ee80b64c153816ace7afee0a42f076a0aed830a6bd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 25.2MB
        • SHA256 79fa7d9324517ff31b725157296a9feb603616e7225d339ea97bb28d72c74cf7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download