Overview

overview

8

Static

static

3

2026-07-07...ar.exe

windows10-2004-x64

8

2026-07-07...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 21:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 13.5MB
  • Sample260707-z2vsqsft2r
  • SHA256 7c9af858a168eb99c05c6b9dcc217e488ecf80be78841418b898d4dea84355c4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4260
  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3208

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 13.8MB
        • SHA256 5c699f3cd5522be2a05fa14e9618ab17e2513bd53e9065407eb986ef69582ad0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 27.1MB
        • SHA256 5dfd3ddcb4fb91a81c2413e0d37adcb5883b791093eabfe754e1b9af2394fca1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 31.2MB
        • SHA256 e52740e16a584a9174c7d3b051d6fb27107937a7946d805c1dda320b96c9726c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 27.4MB
        • SHA256 f07eff203c5e5b6652041df5225ed06120559b41fd2300674c6255831731133c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 50.6MB
        • SHA256 7e28c783b9d8e9aac2e362faf927590f38cb69ee273c13ec313582166b36a160
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 15.7MB
        • SHA256 4f249df3bd7624c89ce31c5ff95e531eed912f8788a8e722be2ce9b05341c2a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 33.2MB
        • SHA256 87fd2bf362f1bedc51d23bd2a1d64df3c35d0c386a9c4488e613f2dc9eedba22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 30.6MB
        • SHA256 45117fae72728cca1e5e3b3153c475b1ce6bf41267fc26ab3044386446508262
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 29.4MB
        • SHA256 89a74eaa814bac7125db30b262b010d2dc9f393bd835a25459aecfe01753cfe7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 28.7MB
        • SHA256 faf8f977b351db7d26631d35f4437b3ec8595797cf36e76849f1a7a1da0b8857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 28.9MB
        • SHA256 6ad20e97350153effb0d2902cbff4f8840810674db2306b8146fb9b1d3a89087
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 30.2MB
        • SHA256 e575fe09ba5a14d9cb190bfefaea07e94092c250949defe6960f4635ce1b6533
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 28.5MB
        • SHA256 ad12c373cd8914a989da06507bc970dd7984ed5d8686aefd5bbe0fb151902141
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 27.1MB
        • SHA256 0cd8f18000627aa7cbaa607d1a446c5bf31be62e5ac5ba264c16013d1470988d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 27.1MB
        • SHA256 3ca77b0c08d9c0bee764674e40540b94c05260033efc4d5960904fdf854eb5d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 27.1MB
        • SHA256 81b4368b50ba0997b7ca3e466f22e2f3905b762f900111650af98596cd90a39d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 27.1MB
        • SHA256 346e817aedf5a97f298921eef00200fc83697d9a2764b825902bfd7f1575c4fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 27.1MB
        • SHA256 ec000a01f4f327a0793156a4d23418e0cc07a1167cd65233d9d81338ee8fc3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 27.1MB
        • SHA256 23c6717569b36371e07505a8f7303045f8f61fd80fca0b03d6dc914f799eb2ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 27.1MB
        • SHA256 70b41e1cd472a4163ca51f9c3e0b21ffc99d2b2eeed1b4f6a0074cb9581d9a2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 27.1MB
        • SHA256 f899512fa3c9bbb34290ab77e3a0c783020830df72cd7914194bda5a1ae06952
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 256KB
        • SHA256 60295b05dd477e3f151981e4ada08090298a0ddb349ba63df0f728dfc8f9cd6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 27.3MB
        • SHA256 c3774d33a184c1c1cd73516da526c8c36c0999382a71259a4519ff90a1ee3d4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 27.1MB
        • SHA256 bad5bd59e8b82bcc8b0f7c885c6f1250fe85f409178ac5fdaea6bf6d11fd9109
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 27.1MB
        • SHA256 14d0bbcb34f20f7395be5c668238faf1093e342eea9f9808a88ae9c1a19aa478
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 27.4MB
        • SHA256 ff0ae63188a737097abd4e9abde109f921ba83a068610257eb449e7eaa048774
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 27.6MB
        • SHA256 734458554d2729b44eeb7fe3d3b2a167acc8d03d89e2212e632e05d28fa966a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 27.1MB
        • SHA256 bd76bfa7b325937427c1a0ec48b50c862133a76ba306f17ba4f27a82ad006515
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 27.1MB
        • SHA256 91f2d703669a56dca8b879a5a584acb2fc6a060c0afe46211a05be1fb61d2b50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 27.1MB
        • SHA256 a36dbfb378de405d8f8bfb0e5ed17d527e6c1bf45962e6e4b7eca3ab9b0230f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 27.1MB
        • SHA256 a003fe71e0f743fbfecb1382cad98ed1b5bb5d85ae1207f1c96f8e1af90332a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 27.1MB
        • SHA256 29a7cefd54ed572db9882eff7b6c3bf648250f6c58684a2cb7cb1ef1a30e7eb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 27.1MB
        • SHA256 2d89f4c2394aea2a364941ef57e8ea2e25ca772810a968827e2a421cd851d278
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 27.1MB
        • SHA256 aa52e998fc11a8cbf3313cdb565bd74621629787aeb7e37d07e0cadd43879688
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.1MB
        • SHA256 567c79a1ab531059509371dcf1e52de4afdbac5b95553cab68100f1337c8f5c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 27.1MB
        • SHA256 8607f8b7bf16e9fd906daf6eaa61d295033abc1c7f8c8c551056200ef623001a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 27.1MB
        • SHA256 d4676ff048f724237e2ab2bbbf7215ab629ba65197920724baefa217c8ae30ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 27.1MB
        • SHA256 19ac61741858aa3fe1493aba59ec77dbfc1fd6b535b42b50ca4dba797104a917
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 27.1MB
        • SHA256 87f4bb676fc81d957e1b5df1bab5cbaeaff7592ad52af7973b547d4be2053c50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 27.1MB
        • SHA256 276be57ff6ceaf824c10ee46b27b63e6160f0bb8d434095c5192760247474073
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 27.1MB
        • SHA256 0037df6cc2526982f23b8b2aa4c5e681b18cb9f251d9b7ab4c09d716052aad52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 27.1MB
        • SHA256 8015876c97d618b8c3d937755c085b3d8bd9fb9f60018e314aa0a789067818ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 27.1MB
        • SHA256 406c2a3bef06f2a646e36c06d5272844a636dc5864da5b4ebd67281d1ef4d784
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 27.1MB
        • SHA256 a4692a7ddbf829083b0ca8e3388f77f24dab0dae1390b83ba3f8a516dc851e34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 27.1MB
        • SHA256 56c9fa2ee3ed5219635c5a5685c84f587e088d71b11137ae9231ea2e46025cfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.1MB
        • SHA256 0f2675f8b5da026b4dfe804b6f3c3677d6e58019401f02f1d051b04fd13f72c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 27.1MB
        • SHA256 549e6ed611bf0dde48d16263d9d5d249d588ef5827b2e186535a06e72f67eccb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 27.1MB
        • SHA256 9032ce0cae2f38e152701fbec629d427de2c79b710fc396276713d33f28494e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 27.1MB
        • SHA256 a69b8b06b3f5f044303391c18928e6e3673af36644ab9871a7f5fb7890bd3062
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 27.1MB
        • SHA256 1d4cbb8c75b171d94e9a0ff75d37876671d44df9e1be5afe33f44cb22aeb9520
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 27.1MB
        • SHA256 edea2fe177e072aa66b7edadc249b9dc5429e08cbb3b33c59b3c586513caa6bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 27.1MB
        • SHA256 aa2f93762f4a6df6b0c7a0cbd4bb0687f3d535234e0261f1f4ec11dac7e91762
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 27.1MB
        • SHA256 a69cdd5a9daf5eb00e52bd894c10372b2b85a124b6710fbbea6b78b2a3f31674
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 27.1MB
        • SHA256 79db24babcea915cd4bc1ad28934a33e3edac21001fbc0466a5ed7211d480169
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 27.1MB
        • SHA256 3482952c79f1c18aed0ad36ab2c69d5ea845e36ed76de28e4af574aedfc77c14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 27.1MB
        • SHA256 c504fb33fd05b3e017eb13daab11f2495987258cbecb72b2695544f747fd27e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 27.2MB
        • SHA256 3de58c9c9643347bfc702758e1c4fb7437107ff6c5a54f0f6dccc078d7b91d7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download