Overview

overview

8

Static

static

3

2026-07-06...ar.exe

windows10-2004-x64

8

2026-07-06...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/07/2026, 04:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 13.1MB
  • Sample260707-e1646ahx6x
  • SHA256 66cddffbd98ab6ef46e4d98b4a71608203bdd16d01e916f2f3d8a1f9b9c61e99
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4468
  • C:\Users\Admin\AppData\Local\Temp\2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-06_36edd7916102c5638c4ca1d8fb889b53_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 13.8MB
        • SHA256 f48ecc6ab73a1cc73e9bd410595c0e33dd7f19bea126a095e196c19aef12b280
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 13.1MB
        • SHA256 0b5d7ac16f5fdd8862fa196ac6e6e62ab3f63e2b188f77ae4bad7635c6168c87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 13.1MB
        • SHA256 f656877994470bc6ec7a335a8c5029f7902723592fae9b09c8ef8ac747662015
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 13.4MB
        • SHA256 01de56fcddd46f421924d0aceac470adc4ed58d3773c926f63eb14a1f521625d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 13.1MB
        • SHA256 ce1754f4a414c5b8938aa7a2f034f669a9b3f684867496bf548b1549565b592a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 26.4MB
        • SHA256 c8c05c41a1fd037608ae34f7fca4d3c64b938104d718cba4f70b27146792eee3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 13.1MB
        • SHA256 874907f0c0818479d68ac5d6f7687751888b305818a379f1855eb63fdbc4ae19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 26.4MB
        • SHA256 527e3ab6f525cdc7c78049922f7a991992f50f5890ea9f855891b1967bf28050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 26.5MB
        • SHA256 331da2823e82769a29a348047b0a020aec0d8657aa9d50cc0fec543d94b0a09a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 26.7MB
        • SHA256 d923d8c9311526b88bafefa41519e86a997bc8e3591b25fa7f8f804f2c7c779e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 26.3MB
        • SHA256 994049bb2d1928a5ae8dd9ab267750046ea2ef2266d09c456c208ec6502f8d61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 26.3MB
        • SHA256 ddf9f63ea80216120a51ea3b69196488f41fa62c68733e92fdea5d51e57d070c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 26.3MB
        • SHA256 8285cbbbe4d0ba73dad04e5cf0af6e88ea999807ffe8ecc2eb535bb14ca65295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 26.3MB
        • SHA256 f3d850ae3d9ac2e70698ce12b41aff91fd82e734ef26b1b920e76f6e8ea2988d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 26.3MB
        • SHA256 3748214773a967b1d251c4e10fe3165ce1b3729cb9baed674be6db959e5df740
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 26.3MB
        • SHA256 bdcc6bf5776ab43794c60b8fdfbe9184204d0be947fdfdba2687c9cc4dda5602
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 26.3MB
        • SHA256 60396dd59f640bd429347ceb4c976ae20c692c8825d9b1d6ff9260a7daa34843
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 26.3MB
        • SHA256 7520740fef7d6b5217ceb1021bf1bf16f4fbd15e267b43d500cc0b0a4fd3e08d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 26.3MB
        • SHA256 d8c6c05571742ce1e855157bede26d5b3e6bbf851ec993a9b5b219c39905ed18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 26.3MB
        • SHA256 7d4b7b6017fa9a9dec62dae8e7416d73b5c5b56214cb12ea2f9968658b3bbec6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 26.3MB
        • SHA256 73f00d32525deaa496c00c15cc9ec38129a38e6fda947106c3cfdfe54c31ff84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 26.3MB
        • SHA256 ce1ee5a87debb8f492a12747c7bd8827d89183c8c7b463d2e240402742c12be0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 26.3MB
        • SHA256 973df51bca0e76352b0d11e31732c9479adc15ee6193bec6a0662bf51cc40145
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 26.3MB
        • SHA256 9e19c881b1a2a13af9583593b9f87dbb766ca97e5353a779a0ab1643b7c1d2a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 26.3MB
        • SHA256 f833679ff08dc779b38659495c1833373ff1945b267c7d57774a911f6f92eb36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 26.3MB
        • SHA256 61a68b13a2eb35fd2cd65b5711aab355b9028ea5e742888d8f722c236e045c7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 26.3MB
        • SHA256 8db7f72e8e3c902826c5475f041bdd7d805503418ba5ed6e347737e288dd4ebf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 13.1MB
        • SHA256 0e42e267a8b956f8b9b37a780b3d25a8c404f224eef34aa22a584febfae115d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 13.1MB
        • SHA256 1577d95db6717deaa3e72a66d51e4981a0b097d1a0c50a9a20b73da0107436bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 13.1MB
        • SHA256 bee9847d0ba471c8fb1ffa6bf188f345f16e4158d9069a8ac7fefa77ab2ccf24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 13.1MB
        • SHA256 b2ba92bb1e5446ab53472030a26c2ee4be39ef7753630dbfdeb993e7c60e3c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 26.3MB
        • SHA256 6724c3f636a198234c582360751a590664df88f148834675d9a394a4cadd750a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 26.3MB
        • SHA256 8212901659c032a71d5a25a7c3c6e557a81b450b0c9c675961c5bd23ba0d2f39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 26.3MB
        • SHA256 ce1afce180bee99d6e923f97803dd796140e583de33f76873a0c7531829484fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 26.3MB
        • SHA256 0729e12f164d22a68357486ed1f65672cbf666d1751c443e451651cc3abb5824
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 26.3MB
        • SHA256 1f44668b1e2bf862807a1e27161133ac72837ff116b409a280ac87dbd6463daa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 26.3MB
        • SHA256 2b343c7bca9ffb204faa96f19034e43e8036eb736a6f97aa314f50667ca7ec77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 26.5MB
        • SHA256 184aaea5067e8d253c2999e0bb1a4119621db3fe8a499b8e2e7fe3a6323bb8a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 13.1MB
        • SHA256 66dc969fecb18a67b1ed7a5cbe6b2fc38c8a5ed3e3ae4dc1c4e2164cf13126b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 26.3MB
        • SHA256 3e829954b86b383d46aa53973773241a401d89f170c2d60517d70db4c15bf173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 26.3MB
        • SHA256 90a9046e4245fb302ffd62e060b2b8426538149ad4bbe8770a26e2740473ff4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 26.3MB
        • SHA256 0dd880ce13cbf5b914672d294764f4c48030f056e0a90f65484c6bf0a14cda90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 26.5MB
        • SHA256 575a16d6530ae4703e96a631e58158cf69ad49fee67d48639611d7c427f753e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 26.3MB
        • SHA256 b46cf3ae1fab871d93b567f89532141457d9f368eb057eaf4ebb1a6d362a8893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 26.5MB
        • SHA256 488d8bc29d31dcac13a62b52e5831de0f748be21394b28e37b08d34f964b900a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 26.7MB
        • SHA256 5669a612b1da44b1bef9b54542f8e902228bc76f2bf531561a0bef429df4d795
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 26.3MB
        • SHA256 0baa94821bcd356ec542effdadb5a558ef66bc7f770e3d1f72883594d66934d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 26.4MB
        • SHA256 27133da904023356f3c1f4cd92d42a611ba4ae035c23420e161c0da428664f60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 26.3MB
        • SHA256 e37937534ff29e3e9781016e08219053fc8b4a52031bbab315d7bc7aac899c17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 26.3MB
        • SHA256 d68e59c6da226cb1db36c582aba3aef045b1f36d95e430e7d629263623dd4f88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 26.3MB
        • SHA256 4c93ec49c844a55656a2c68b4700ca5ad31482b80ca6381c0315c055c830f6e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 26.3MB
        • SHA256 ad223c89606d1c285e6f7518c330db5dcc3580be5e9c6cb7374b68fd20eaeb25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 26.3MB
        • SHA256 4029846bae9d51af1eb79c6724704c6795769405b316183c5f3f9b1d0fc147d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe
        • Size 26.3MB
        • SHA256 a76f5a7227f3d6940906f41b3a9773f0d165c81cd8512e4f634f229730f3affa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe
        • Size 64KB
        • SHA256 561e710c0f12a9ecf3c544ad6eaf227983f3f3f2dcce0bb2f803afccc641ad14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ssvagent.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe
        • Size 26.3MB
        • SHA256 9ca90e9912ae3b722a8f774f038f61a09e33930b589f15fbb3de2b2bcebb8674
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe
        • Size 26.3MB
        • SHA256 6f9822bd0bdfaad32e30ccc6f2c433c6ff3f06ba0645dd343ac8443fa28c0e93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe
        • Size 26.5MB
        • SHA256 899c4587db45d0b12bf0953ee460349712aa882dbe1743a238b5041391c68e40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fontconfig.properties.src
        • Path C:\Program Files\Java\jdk-1.8\jre\lib\fontconfig.properties.src
        • Size 26.3MB
        • SHA256 ef515958774fa2493c92bbc640ab1a26bcc7ea951e47144ab66aa30cad457214
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 13.1MB
        • SHA256 66cddffbd98ab6ef46e4d98b4a71608203bdd16d01e916f2f3d8a1f9b9c61e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download