Overview

overview

8

Static

static

3

2026-07-09...d_.exe

windows10-2004-x64

8

2026-07-09...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    123s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/07/2026, 19:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 29.0MB
  • Sample260709-x4mtsshv8x
  • SHA256 4d8e8f92e652a1a740911ac22a086c5458d25023859b4d553e6840e615d23f6e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1352
  • C:\Users\Admin\AppData\Local\Temp\2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-09_5f88508aebd44182aa024bdbf19ecff6_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2064

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 29.7MB
        • SHA256 2c63ea3ed83b3de3b4ed55aecca318b04873b820b162df2f786bf8b78fff5e1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 31.1MB
        • SHA256 ecb183249a90e291b2fc1a1b98dc65855b09dfd55a28228b2b63ff9f0b887da0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 29.1MB
        • SHA256 f09cb4267ed0b33c327e4a50cd70cebd68a957d213a246184f40791071f61e56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 35.0MB
        • SHA256 11a7010f4cc04910c1c5b7bc90803721f10192326269fcdf8cb7a6a65e22f1d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 64.0MB
        • SHA256 1d83f7773f322ce019dd116cf9e1a8d48817aec9fda3c0f61fd36a68daf5b2c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 59.6MB
        • SHA256 47428672aebb56cf830f683257909ea0a4552adaeeb40b24023ab001879f83f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 53.1MB
        • SHA256 05d2d4ddc012e85b3087f9f00e8d185eedf195f026502069e09aeab9734d256a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 49.9MB
        • SHA256 3c22a84869d4cded03c15acf42ccd7e36cb42f74e017e2f063f4a1d81ab48295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 49.4MB
        • SHA256 af7aaa4dc0c8ce0388b273c108ee4819e16d2b58ca89daed8d9dc4b1027d4cd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 48.9MB
        • SHA256 19bd62c5279e056c9beb425ba20b033eaae30047c3f30d9cec7329ec261107c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 40.9MB
        • SHA256 c3da59a437c3ddf9f83882485a690b720b37d04e64eb40bb98b3e06b894abc4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 38.1MB
        • SHA256 e278fc96b98f7fd1938a3a82d261c312b8ef79285d62a639b9cdbea40909ee11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 34.8MB
        • SHA256 c4da651d4daff4208d2c98baf89018c6c4a822a1500df8bfdcd2267d59304ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 29.9MB
        • SHA256 e82d9ae86a9bdd8c07f7c683f7943bede463c73fb2b5957ab6686d2578a9bf32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 26.8MB
        • SHA256 fa1852e777b43726f11945c860dad3afba3dca7508a80debe0be8968a2af582e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 26.2MB
        • SHA256 616e7cfaab52522ee0bdaebc07d0b41e2eae5fb5f5098ca39ca11c0a3e28d5ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 25.1MB
        • SHA256 1afadc8e82eb0047afd787aab638b3dd1f5426b465fd41b2dc8480a9954d83e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 26.9MB
        • SHA256 ec9cdc99d10511e1c1f748e271cefffcb10379c3e4feac29091bcdfb8416ef8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 21.4MB
        • SHA256 7a5acb9dcba90117cd003e1df9689290001ebf06eed525fb7f8d69508cf5a9e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 20.6MB
        • SHA256 e847d0d2ef1eae5eecd54999a039c5f4d4b629e262063ffd7704cd7346cf3402
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 22.0MB
        • SHA256 a28573af230e57d9a8c32b9f11dc55929f3720e879aa5e2f80ca446ba48771c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 20.4MB
        • SHA256 69e5e2c4f5f40164d564c8c202ea3fb8d687bb8740c7a9dd37d9380f185e56eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 21.8MB
        • SHA256 e6fb844ba55c81551bc90badb33f4d4b0cf55256cfd4af56a4a204486ebc25d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 21.2MB
        • SHA256 ea802f7a044fcc370b9a91645e78228dde0fb84fc3d51e20b61e2f1b1b6c1bb3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 20.1MB
        • SHA256 4c0454750348806da07cc51bbe3e05ea0918706dd0d327f4b47336d4b144140b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 20.7MB
        • SHA256 9e3e1e54696d004a7e40e4e4904592ba5d32ba18d7855b7fb9231722729c31b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 19.4MB
        • SHA256 1b233e7a88bdcb7b2d29bda645048ff8279eb9f27030880a80c5bd11fef7f207
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 19.1MB
        • SHA256 1a3b3dad5758ebf5f3d533af29a87d09ae60f0bf1d4b3871ef0237c4621a1988
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 18.2MB
        • SHA256 2d99f6f745f4d76104511a46704e8940ae4a7eae68468b7086c93e3014ab1971
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 17.7MB
        • SHA256 3e4e68b8d0bae05b17bffb94f36956ac8b0f3e509fabb7962636ef03dae2f33f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 16.2MB
        • SHA256 4480ec251ff11a2ee7f11e2565a47506a38105cff50d435a4bafa3e8abe6c9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 16.9MB
        • SHA256 7250b7b904f4944abea5ff7f367079129f42b5f4230e59d01995fc3e5acfcb3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 17.2MB
        • SHA256 65db760cc7c34c35e169f5028f959802775b7a72015d1ef3d14ce00b809533f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 19.1MB
        • SHA256 f1328d3dfe6b66c08c163545c2c3d122024c2f3e11ffa636e7ea589d05f52b01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 17.0MB
        • SHA256 af6a4ea824e0246bd11b7ec4f7f4c63f06a1c66387a283cb5928be878a37ab9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 15.9MB
        • SHA256 724a3897f72c9509bb9bc3fa316bea1950f64b421cfeb81c7d2035e362482914
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 17.2MB
        • SHA256 9676b6e0e0d5b423216f60f9641aeb7b40395b39a973eac22b586e504cb51cde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 15.1MB
        • SHA256 27d68446d9707f7244805601ada0fc6a792b328fb71d1346564ffc868dc997d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 14.6MB
        • SHA256 8d1b9a6a47b6c74f04d344c1e3791ffd1bb9746c57c7ff37c88070d5906bdc2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 16.5MB
        • SHA256 344000a1ebe4cd7fa239a8967e345e0225bb9a568f088e3dd8f8234a314d3122
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 15.5MB
        • SHA256 ba1ef20ec3f96702f1e0c6350107b2be68b14dfe425ddc9f03dbcc8fa00aeb6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 17.6MB
        • SHA256 d26d94f222ab4c44bf579f04094b736d8c16e4f6bc8433476261cbceadd4785e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 16.3MB
        • SHA256 0ca3f80b1db3e277d89d3c468d663ad9fa438d9547e27c7b4c39e13c18ac2946
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 14.5MB
        • SHA256 e94e75d301f536478b5e177c82914e9b765a27b47ec42b59b97b3f760bcb621d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 15.3MB
        • SHA256 411fd4595b54cfa46eb50718b831932b1f23f7295b6532b7731067b113682b11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 14.4MB
        • SHA256 defba7e90b88bda48e6573d5ef442995ac54501b2057ad973e66abbfc3f40dbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 14.1MB
        • SHA256 e201af23c9f6e1b48a9f1e8a74c6bf3fa4254628bb0b1d74278f3eb32ed7f66d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 14.4MB
        • SHA256 d2b5cb3218b39363d1f93533c29bdd9f252d2802a5fa03042493e2fc08bb2900
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 14.1MB
        • SHA256 deea624894f3cb4b1c4238ff46462be327e0b0e41119885e6dbed2f2c66bbe49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 13.8MB
        • SHA256 8cb956219576716288e7352cbccd1dc5c1d61de04b92e47aba8943b840180571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 13.5MB
        • SHA256 c2d2bd71cc1d0c7fe7a7be312b1ca3966a58490e0f5beb94b7e0bd764f120453
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 13.1MB
        • SHA256 454e6f0e33986c4089226c66069624dbe2f6a58a3322279f75fc4af1b9dc31b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 29.0MB
        • SHA256 4d8e8f92e652a1a740911ac22a086c5458d25023859b4d553e6840e615d23f6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download