Overview

overview

8

Static

static

3

2026-07-08...ca.exe

windows10-2004-x64

8

2026-07-08...ca.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    23s
  • max time network
    75s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 16:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-08_f4d7aacce656b9988147de76c2eeed89_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
  • Size 23.6MB
  • Sample260708-tydgdsct7r
  • SHA256 6e6f1108c4c3163e7becf0f397decd807c293b16bdc5e06e2dd1556042fa6a39
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_f4d7aacce656b9988147de76c2eeed89_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-08_f4d7aacce656b9988147de76c2eeed89_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2012
  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_f4d7aacce656b9988147de76c2eeed89_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-08_f4d7aacce656b9988147de76c2eeed89_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1948
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
      PID:6132
      • C:\Windows\explorer.exe
        explorer.exe /LOADSAVEDWINDOWS
        2⤵
          PID:4700
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
          PID:2340
        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
          1⤵
            PID:52

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                AppVShNotify.exe
                • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
                • Size 23.8MB
                • SHA256 b13df05499fbf649008e2aed49302ae9ed3264c361ff89c823558b3c025fdd76
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                InspectorOfficeGadget.exe
                • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
                • Size 47.2MB
                • SHA256 215a74595a7bc99bfacdb1e2c539ee1515cde4a53705adbdf7e7a664e747748b
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                IntegratedOffice.exe
                • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
                • Size 27.7MB
                • SHA256 d27f9f4646f884be39367fe8943ed9e468f0c3479bbb00b30124f2df79432c00
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                MavInject32.exe
                • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
                • Size 47.5MB
                • SHA256 6cae7bb19e6d166f7b955d070f1bf818bf2ee56902112009be104c4d3e2e2a99
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                appvcleaner.exe
                • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
                • Size 25.7MB
                • SHA256 742af21cba5a154f305f027a7ae73ce06c5a45c0813703f4e54733e236c4f64d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                VSTOInstaller.exe
                • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
                • Size 47.2MB
                • SHA256 a8d1bc2e2338b05eaa3d2070f89cb32734211c66f9fa6f199fb263c4f9a2eeac
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                chrmstp.exe
                • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
                • Size 44.9MB
                • SHA256 9e3ca435b1a735bfec9bf657a0ef6b81c5b6fb9444aeade266e61e11084819eb
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                setup.exe
                • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
                • Size 44.2MB
                • SHA256 df6e86b234e6ba6b21436bb7aaa20fd5ba7cc285b5e433a8606b96d0dafa6eb7
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                chrome_pwa_launcher.exe
                • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
                • Size 25.3MB
                • SHA256 81355786f4a259cf568dfe9a882b2b9a05ca7ec7c398b87c8d25bdfccf151ecb
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                elevation_service.exe
                • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                • Size 46.1MB
                • SHA256 3d44a3cff83ee4f9953d49dd25dd6e1596302403b64c7ff7de5baa4f269c431c
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                notification_helper.exe
                • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
                • Size 39.4MB
                • SHA256 cf12d085d9f27c0df7aeb38a1411965d728ae18b69f90f78ccafec1090ffbeaf
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                os_update_handler.exe
                • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
                • Size 43.5MB
                • SHA256 e0b8f4761a74ae5c0f8cf4f54155b4965fcb9ed6670daa9403383bf7980f4d2b
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                appletviewer.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
                • Size 41.6MB
                • SHA256 c247ec87b7466b52d902420cd1df54e3846774ea852d9a44b10747c985256b0f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                extcheck.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
                • Size 39.7MB
                • SHA256 edc3ae9d90d4053d124f532eef82b26372ac947a23f4760b8548af879dcffe00
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                idlj.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
                • Size 39.1MB
                • SHA256 c0476e6e38c2ca361c15a846cd98dffaa4a48cff9b6263f6af0d6346b6d28fbe
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jarsigner.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
                • Size 37.8MB
                • SHA256 bb6e4b7b6cef64617aa1397770feb6045928f5ee28a03ef514119d8bba57a357
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                java-rmi.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
                • Size 40.2MB
                • SHA256 efcce9896fa74a0fc820ca654392f0b6f13913464144eb9ebfd23506a6c1efd7
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                java.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
                • Size 40.0MB
                • SHA256 248921a694c549eeee14b56ef5119e8f7475db548cf7cdc10ab87edb4d917498
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javac.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
                • Size 38.8MB
                • SHA256 b9ad5b2842f959b25fa285f8ceaf49ff06659b75806f0e261dd133a304b1b642
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javadoc.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
                • Size 38.6MB
                • SHA256 f91bc1bca95e55b7b3236a8954e783c4c2d63e8212caba0ed68202241cefc3a5
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafxpackager.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
                • Size 35.9MB
                • SHA256 833688133433418ce802dd6c013b75fd8ccba95e9f01e0d66bae9a305095d2e6
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javah.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
                • Size 36.8MB
                • SHA256 267380801ff09cdc1eaf0c0f76adeaf539dad355f6b22bec0c7b9a7c8c0a6779
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javap.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
                • Size 36.8MB
                • SHA256 14d676f45f57370ff64bd9b29d9713657a2e3657a798e69deb4d1a2f4e35fdbe
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javapackager.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
                • Size 33.9MB
                • SHA256 509bce886e343b1e2a9ad033158abece78372d9de1ce5ae9263a0336bdfe6283
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javaw.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
                • Size 36.6MB
                • SHA256 bf0337cb6199f996588f34a927ab28118daf2808b5868a45f0eb4a5762e119a0
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jcmd.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
                • Size 37.9MB
                • SHA256 1367e1d354ce218e71838248d6494ed2bffac6812a54ca5f0b416990bab2b287
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jconsole.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
                • Size 37.6MB
                • SHA256 d40a21f897d50d5e65b00dd368d48e12222a5358e3c9f629977974da07aeb0f6
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jdb.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
                • Size 36.2MB
                • SHA256 0291205af9f83360690436106635192d856bf369cb69e59d2d646c55c77ffc9e
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jdeps.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
                • Size 37.7MB
                • SHA256 805231e3703b0e96925049439efe6a444ce5c065331720daf58303c3f3340d4f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jinfo.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
                • Size 36.9MB
                • SHA256 99d219355afb826e088cf0a113c0b02f58f58fa7c80ad26fa1cc0c980f3e56b6
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jjs.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
                • Size 37.4MB
                • SHA256 d00fddfeb530012eddfeddf9101396a4cc89c80a1c7dd24ac88c8a987d5c348c
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jmap.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
                • Size 35.8MB
                • SHA256 357b9ef0b9dfd79fa2411b8c56981aea0a0f3bb95604ecb2d7c6048d43d35bd8
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jps.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
                • Size 36.1MB
                • SHA256 d28a51e6b7a97d577b0dc59e9d12321c2bedeac76a9ffaf7df3e1d593d63277d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jrunscript.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
                • Size 35.2MB
                • SHA256 aa28af2e4e1514d2668371225fd358e771abd0cf45bc45a48d44cccb65db7bbe
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jsadebugd.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
                • Size 30.3MB
                • SHA256 adb9380a513d24e7cb46c488c228fe84a9e22184076cc1dac72cb5d66e02250e
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jstack.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
                • Size 30.2MB
                • SHA256 cb4a710046dbbf30366d90447be6049945e913192e1c3e1e744d457f7b320175
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jstat.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
                • Size 32.6MB
                • SHA256 7b477e3245c44a40d86d73c44db1348a369186d662a4eb58f069b472b2b9a81d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jstatd.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
                • Size 34.0MB
                • SHA256 dad6860d57fe42fdae866423e53ca1d4f3128aa66c9851486ae4049be65a3a25
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                keytool.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
                • Size 33.8MB
                • SHA256 fc203870cdf24ccb9f99c77dfeec348bf259e989da5e4ca89e5ef02698205023
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                kinit.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
                • Size 35.4MB
                • SHA256 d31b5e711fc36fe149221d6137ff07492d54d77d2ec0b1c9455949290ad0dbf2
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ktab.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
                • Size 33.8MB
                • SHA256 a742f5209ca3382ccd356a4dadc086805a588f4411f9343cbb9ab84cd144097e
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                native2ascii.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
                • Size 33.7MB
                • SHA256 62f0545119d560199796059353a4a8254e8b05423577fdbcf280d82c57a01dd6
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                orbd.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
                • Size 33.6MB
                • SHA256 1d8bc038ee0db17cfd300a81f02e7bce9d1578b235e3d0234905ff1e32ae6876
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                pack200.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
                • Size 33.6MB
                • SHA256 e5ffaafdc83ba8edf042e63baa386d2a82f6745cdf0468b5a8e61ce9a3148bdb
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                policytool.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
                • Size 33.5MB
                • SHA256 68e10fc3edd435858a062addc471a0873c0f0c5b2a9824f7311ac62225c0c609
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                rmic.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
                • Size 31.2MB
                • SHA256 c9694bb0ce47ba8b8cc41dab3f5659ed8efd3204dc8a6ab1533b5a1a55809b75
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                rmid.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
                • Size 29.6MB
                • SHA256 cd87f72866976c571f278c325d1dc985c4b497bd13728a4ddec5aae6c2127aba
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                rmiregistry.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
                • Size 36.1MB
                • SHA256 6b37dca81dda107da542354a77c0fbd0f5fbc88cb6861c4ffa2723cbb6074f5f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                serialver.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
                • Size 33.4MB
                • SHA256 f0ef24194837359b2d5dbc871dd2c0368c824dd54f90438614744969f6d305d9
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                servertool.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
                • Size 33.0MB
                • SHA256 cd197157b1dbd058e3be0bd1c5d2af8e02ce0c63e643692aec4e69d54b490ef4
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                tnameserv.exe
                • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
                • Size 29.1MB
                • SHA256 07808649b00cbf2b64a9a31be964335a70fffbc1d882074dc453f289bb1342e2
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                dotnet.exe
                • Path C:\Program Files\dotnet\dotnet.exe
                • Size 47.0MB
                • SHA256 43497e6d8044a9ae0af010dedf12ecba2586e1cd32a12a403840eb829a50ca84
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                createdump.exe
                • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
                • Size 47.2MB
                • SHA256 51e378d378c70d20563dae672516432d1b1d581a795e566252a95a5c6bdafa56
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                createdump.exe
                • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
                • Size 45.5MB
                • SHA256 9efc7b57f43f8adaeeec116297c53d5e523baae5c976dbfd36e8c697ce4f4078
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                createdump.exe
                • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
                • Size 45.6MB
                • SHA256 92d9a03fae0a68cfe96888d1aada1de121c34b7a9b7cf9abb2c665ed7b8795f3
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                prep_Activatable Class_Hermes_perf.cache
                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                • Size 595B
                • SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                memory/52-354-0x000001F680200000-0x000001F680300000-memory.dmp
                Download

                memory/52-408-0x000001F683EA0000-0x000001F683FA0000-memory.dmp
                Download

                memory/52-423-0x000001F6942C0000-0x000001F6942E0000-memory.dmp
                Download

                memory/52-409-0x000001F683E60000-0x000001F683E80000-memory.dmp
                Download

                memory/52-407-0x000001F683CC0000-0x000001F683CE0000-memory.dmp
                Download

                memory/2340-361-0x000002AB8D000000-0x000002AB8D691000-memory.dmp
                Download

                memory/2340-555-0x000002AB8D000000-0x000002AB8D691000-memory.dmp
                Download