Overview

overview

8

Static

static

3

2026-07-07...ar.exe

windows10-2004-x64

8

2026-07-07...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 13:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 12.4MB
  • Sample260707-qvctxaa13x
  • SHA256 7f7c53367a8f5390223a4710f5be781586f2aec187dee977e4ff1c7fa7eb58aa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3984
  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 16.5MB
        • SHA256 1307bec3f708dcf189d76d2c230d317d23643d0ae188956c1ace820dd09d8cc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 25.2MB
        • SHA256 287faa5add82388a9d2024a2cf60cd828018d331084a31aa81f86a6edebcfa29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 48.3MB
        • SHA256 7180c13fd89c1dc3682d2c0ad47fd8481d5cf0bc25add0bb2d4a8bc6367a17ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 14.5MB
        • SHA256 776c809d7427597048d9a3e178da614d66f42a425b1a7170e80d05b81c6906a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 24.9MB
        • SHA256 63ac59ea825a34337f04b0eda0e011ef01dd94e3e40e06a4593b6948723d59fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 30.9MB
        • SHA256 024e02e2a9dcf63393b017f09b6fa8c7d9076f8256b0dc07512d6bea2d92ad14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 18.5MB
        • SHA256 4e277c3bfba9d5023a65c5f56f915db418a6b796411d5c5b47f3259ac4c6ff36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 27.1MB
        • SHA256 320c00d117578471732690d2e0b1deea07306f793fdc2d0a7049cbddae8c3549
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 26.5MB
        • SHA256 f3e845e3d9824a204939a63122f711c57cf469e1ab791e3250dfe39054f1aa1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 13.8MB
        • SHA256 45f200025e3f608e7347ae569020a7a6959c68678819dbdd3240ae963d5cd03c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 12.4MB
        • SHA256 7f7c53367a8f5390223a4710f5be781586f2aec187dee977e4ff1c7fa7eb58aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 24.9MB
        • SHA256 ba9076dfe4370656db8356dd34f605e963a25405b0c951243bf2e4a78e266492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 24.9MB
        • SHA256 7bb728dc0b141cdd6cbcdedccace29444b5dd6c6f002e140c3f0a6404327c961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 24.9MB
        • SHA256 ed4277528dd21136a87b57683536b986d51ef7b6eaadf42902598be489ea5681
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 12.4MB
        • SHA256 a4ea41b5083855cd34cad5e5a53c71d69520e74e659a7eeb2b7acb9f28c53dc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 24.9MB
        • SHA256 ef47ec4833714f07caedd037ffa35cfd5855c127b27b9a763f4a4aa6aab765c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 24.9MB
        • SHA256 cc6da6f74a7f01f8db8e0f728cec17bc654cbeb429eaa1e835de414ca3ff3e85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 25.1MB
        • SHA256 4df8fedb35adb3462c64f15fa8a096976c3f2ede626a8df1369398c9222e4c26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 24.9MB
        • SHA256 2a564d430823365a9cd193367a3224c83119d88d2b948b1845c85fec369e04cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 24.9MB
        • SHA256 04b1b2b835f99ba418f253cfac76b79f52a8fb6a820f702072fafad61d4181a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 25.0MB
        • SHA256 7327f43f077397fbf6534e26d70d50324b1ad76dbb499e5b682d2796edd7bd64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 24.9MB
        • SHA256 96a54187f33da4fc78d0fff78a94e363fe7c4c06963af4643c942505a241e31c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 24.9MB
        • SHA256 60a0b4b5e80577ab24e64268b5bc6a739b2b477b03983dcb302ae9660b0bb4c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 25.0MB
        • SHA256 401edeaf5926d47c71b29afaa94fa8f776c04bde43f86db90fc4005113e3b2c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 25.1MB
        • SHA256 98fb6b3bd6fbb6ebaabf5c4840582b41e8146e313e596dce8c4a4621f6043ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 25.3MB
        • SHA256 78434ea545a52809cc6c4275e8d8ed11d04d30abca64b3465ce0fff895e0bf1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 24.9MB
        • SHA256 840350f251159fb159d93d2a7b910f79d1ed05519aac5e513871325e96113e77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 24.9MB
        • SHA256 ba4ec901dc82107ab8623f02ff1903adae7510f3cc98844d56e683b2118a9e2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 24.9MB
        • SHA256 56a235dd7540466978b8f0d509cd881f922e305fe6999ca4c8bdd3bed2f7f630
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 24.9MB
        • SHA256 01a351282af2103ee570cae2a6d0202a19218b151837cc55931a41011efaaca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 24.9MB
        • SHA256 2dfb6b70a062e717b108aac8a642672f2dd7925b5cf48d831921ede606574519
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 24.9MB
        • SHA256 d54e6f6f81c5005571e4f85582292fc9d417b903d77dc3cee4a41c3ec60ed296
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 24.9MB
        • SHA256 508028700fa6cf35f6cf067415056621f8702e66d49bdfa6aa914ef0ccb19942
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 24.9MB
        • SHA256 f0ad0e0a59444658114e762644ca7319cec846ca023d79aac50f55c65865e5b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 24.9MB
        • SHA256 dec32a51717610b296781c39cb67c91ed1224b78b49c1e1b3843fa46c727280c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 24.9MB
        • SHA256 2fc540fe8260d4d7725d2e510b0923741a2320ac8c3591a50389eddc71aa5060
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 24.9MB
        • SHA256 fc03d08af92c22b52803b22ce938b431320b8506fca7ea169e1b351bcec016c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 24.9MB
        • SHA256 3edd46da80a577eca8e8b3616dddefd27392264fa06f198382d84e9a5c66643f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 24.9MB
        • SHA256 ff956a69112a059fffbfa205aa1882c87c344fe726b35acac93d34829cab31c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 24.9MB
        • SHA256 f4014c3427452d66c7aa7baba0b8e8d53a147c4f66d5f955c67635b6a0da0283
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 24.9MB
        • SHA256 cf56d89691487010e2f7dd2389fd2512526088df835edc3d9417d860749b529f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 24.9MB
        • SHA256 175b91f4c4ec80d1a3a622805ce17f268db579910ad55da3ed7f35b02fecd456
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 24.9MB
        • SHA256 1823615a9c475b95699ce73baf504ac16e1063c0e45295b67d8f2037a48f3ab5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 24.9MB
        • SHA256 3a2c8d1be34888993517eb6e69c3b5eb7231e2e378c26ba5e4f9aacfb0cf07a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 24.9MB
        • SHA256 2b71d8663efc96d07bd6026805f95fc77d87683d5540dae35661557d6a60dea3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 24.9MB
        • SHA256 0d9580f4ed3563b8bfae4d00c59eeeb94a0b9282b074dc7b9a83bade96ddd6b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 24.9MB
        • SHA256 fc6e18a73ec0f9a9ad64c2b2eefe44b49d0d86d2a57b4b4b7e2e954587430864
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 24.9MB
        • SHA256 ceff1bc1761b5dbdf1d828ddf1555ba9009f1edbfbf3129536c53f5aa993a333
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 24.9MB
        • SHA256 716bcf419ec0bb57599a9da0f0df7458a2f645e0441985a5092e9d08bc78395a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 24.9MB
        • SHA256 9ca2cc716654e46c3203c58f3cced3362d29d7ab6ba820d0c33a81610794539d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 24.9MB
        • SHA256 bc09c9194dd506596782e02abed2692364e7ff82c5ba032fe8228aea0f8b7656
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 24.9MB
        • SHA256 83fa804380993fb35fca2b369d200b16ffd0a30fae786d4387f5f1f3843c3d88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 24.9MB
        • SHA256 0acd585252ca8d081ccec32908109bb699a9762554d52bfa174c81256dfcd6b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 24.9MB
        • SHA256 6371ef6bcd352350eca7bc0351f79adbff8eabd8766b02e185401317a697c313
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 24.9MB
        • SHA256 53997c69ca35d61e93bb6b0461c7f9b0538c8213f81b023895e2217f22e4ed1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 25.1MB
        • SHA256 37bc33cbd428d200f3c418d45d49cc2a8389137317cbd1d4f1f717de4d7ece4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 24.9MB
        • SHA256 10b0cd0c155cd1ee9b1db00f9251e85d767ea0a470ec57497d4651b99fe50068
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 24.9MB
        • SHA256 29868d18198bcefc00382f287a226f18d3ef4636b4f6fbef30d45bfd4cb87fb3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 24.9MB
        • SHA256 b048e349668927e0be70a886d2b4b955b7fe2dd1daf946479e38642d2368f69f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 24.9MB
        • SHA256 3ffc3cfee64f62a678a30f1144ad9ad26d65ea1a2cb6e10a03e8efe57a2f6b83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 24.9MB
        • SHA256 abe6d263bc2ee01a77fcfdcae61e87a1c742071292f1bf6013f95d485f81f09a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download