Overview

overview

8

Static

static

3

2026-07-12...ed.exe

windows10-2004-x64

8

2026-07-12...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 11:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 11.9MB
  • Sample260712-m7psfsav3y
  • SHA256 c4deab6f66d544665448552841e90aeff2c90fe921e64bbc7327a91be655dfa7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:788
  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2940

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 12.2MB
        • SHA256 7ece16b4bb35a9e902fa12c07219f6a5072c301bb5ad0833b205c4d5e164e721
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 11.9MB
        • SHA256 a799a09c1f3bd227e76fb84f4bbceb51037a8a5033c5160ac1b78cbc22ecbc8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 16.0MB
        • SHA256 800d3433bdf7929a35631460753c25d6c76997e0de64435053a8b5c926c8ed0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 24.1MB
        • SHA256 086c085d09b52efbcca9cb6b5c85e8defc5219b1eccdaf63be16f9a814d0f91c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 47.2MB
        • SHA256 63e4e2bd96f5c8273af904b5467dd27b598c897c5fd337658df07c8f9f51c045
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 14.0MB
        • SHA256 0863434cef02dd1ac30b667fcf8e411523f4d69e8382ae9fd18ca6a317fd637e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 23.9MB
        • SHA256 b2b5cf5ec9e54c06b63bef83e3407cd9d7408cefe07796e0f96127bf229bc651
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 29.8MB
        • SHA256 3af6d11243e2febdb53c31157b47f43849b22b3013aefc5e0c2e445a3e2aa3c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 25.5MB
        • SHA256 7749fe2043ac8a4a2a815afde51cbcc2db0dfbc424b84af7abd142ce0cfa8c6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 27.2MB
        • SHA256 4147b4dd505e926e93eb832638da68a3fc6b130d0c737bd1efe910cda9f73a82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 26.0MB
        • SHA256 5dfdfd62911bbe0a3e557326c1d9ff6725c2dc880a46edc47283fdb47476c0cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 25.4MB
        • SHA256 f8d058c27298df88499b271a91eb320d22ada69bdb0fba6f295ea860ce814a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 25.6MB
        • SHA256 6ca7b87dcd2b443b9a1365f6fb8dbf30551cc9de436c85f9cf6b45f05c6ee37d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 26.8MB
        • SHA256 186e28f77d1ae24ddf55be30ad89252e42bb7eb7337daba0211a76d9efd43a81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 25.2MB
        • SHA256 22c333283aeb0f8fdf4d05a1492ba5578d30e6d4f4761cc0e1f86387c0b0f9a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 23.8MB
        • SHA256 9d07c1adca5bfc735e73e61ad2a63f9812780d53a7733575437e3c63e5ef5356
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 23.8MB
        • SHA256 25c6b9f93cd23cd52cf1b57a6322bc3be00cf8dab653b5184500709e54a33b5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 23.8MB
        • SHA256 1d037954c08371fbdd17eb65204ff923e2fa689e4e104510664e312df82bf502
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 23.8MB
        • SHA256 36d7fc71727721a28d85048a7cbe759ad83d505b7175c423f75813d93d7b09e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 23.8MB
        • SHA256 aa3d0e6fd326afda40ce0341fc35a27c71005532f3e31725402581a4f19655e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 23.8MB
        • SHA256 ee16299ad8f72e001f5ec8d076ac0a559bbddee3ec611d1436c7c38fbf398f74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 23.8MB
        • SHA256 e61e4c39450f003dc792532eee7e4cbecc803bf0dc606c0555c94ef06b4d8a24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 24.0MB
        • SHA256 a7ad30da02263782e0d59798e6b6af916e18bb97c0c12fbab8571077bfd05a10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 23.8MB
        • SHA256 7819bb1bd28fb6f94618116b69e071bccf19db94cd9a230fa25ecd253a3d297d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 23.8MB
        • SHA256 692cca76f754afd26b188eb80df5610bcc95c0a6a0b721402329df80920ac88c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 23.8MB
        • SHA256 7ba8fbfa6bb2375febfac8f7e599a436d8c9ee85b34ffbf0047ea259b26ff1b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 23.8MB
        • SHA256 f87d54195bb62bb96301f117c3b92aa072a28487f0fba1af4a94e192fb988f63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 23.9MB
        • SHA256 d5a1b142cf8117495b28b8a0755aa8e86fb0224495ebe40ad49e1dc6e1cc63f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 24.0MB
        • SHA256 e135b9cb8bc3b46d91d844caddbee840fca3fdd7869ec2036730c8f128c13660
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 24.2MB
        • SHA256 cc0dab9bf0dec169c2b0001a95e5b1e59c1f6346bee347f65350435800f7ce83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 23.8MB
        • SHA256 3de88fad75d5ccd67e241f09ba7f8bc752a7ff86facec01a0ae477025c743d5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 23.8MB
        • SHA256 bf81ae2c0681cd161fb09450366a803f4e19d6c6e5d8d59a96dcb6186bba12b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 23.8MB
        • SHA256 1b801749b62f2ce761bce32de0c29869aa9908efbf27814990f9a1c1c50bec1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 23.8MB
        • SHA256 152485a9d1d800ff6f4e7f07657fa9602cc02a321e7baeca889a92b67a0914af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 23.8MB
        • SHA256 ddd1f3549a19f9bb4b7152679c84f5a7ea59977e3023ee407c83f45ca013bc33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 23.8MB
        • SHA256 217536d1837043bf9c8876e7814d0c1797d0a27b4f7adbde5daa53301f3602be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 23.8MB
        • SHA256 c619a46b5c8e0c7763de21962d1515c542ea8fee2925123d9a3aa2b7a3a203ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 23.8MB
        • SHA256 78b50da29f2d8522c0f43d6c30be687317e285f514ff6d6ca170ea2c19dfdbcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 23.8MB
        • SHA256 07847180ceb4d2cdb8dd53c5de01e60b92a713fcba795a6bd8b9db370b76c9ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 23.8MB
        • SHA256 9b8a2c905fb5a286634517003710b6563a02bd89d1973de8d3fccfc1e09feb2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 23.8MB
        • SHA256 89b04df6e34964de097360381934ee519481c74fe191a818c3ac10ca0084ea92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 23.8MB
        • SHA256 db52b862150e552c5e713d62112ab71a48fd7c9b88b2bf9b0783557a62cba85f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 23.8MB
        • SHA256 67696697e7a8d14f1e5680334575a63b5daea9a827a26571e77d3bb2ec52ff86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 23.8MB
        • SHA256 45e7a73c334cf09d92f596766a0f5a1c1b4f947b28c44b7477c0fd1bbbc040ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 23.8MB
        • SHA256 e7c432738043955bd8c0ee6581b91f2e675a2a18e1748647dad122546ad036a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 23.8MB
        • SHA256 c0534a2e699dba672ffc1a392d8cb75fd4c0577d557ac621d131cc90906001af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 23.8MB
        • SHA256 2e6da5bf1016ef7ef69b7ac7a63c153e09bfca8f24fd200d4fbde055a5a41ef0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 23.8MB
        • SHA256 74166d7911e58102cdc2cd1e6b31029477653dcfc5f1fb14b3bc31946ec4b677
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 23.8MB
        • SHA256 11c560597bb9fbeb447cfa9b56b1d6621c26a2fb053bc42beec7f607150153ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 23.8MB
        • SHA256 4da00687e35f5c55a9946f2561d7172e74c8ef0cdf34532f83982faaa048716c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 23.8MB
        • SHA256 7d70b8be61d7d14600b01db5c2ae2e79619868eb1f3845019e1978e1896a7007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 23.8MB
        • SHA256 ad92e3329365fe8b60ce2557d36174ccddd3f59b26afcb89fedcfec6fffe904f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 23.8MB
        • SHA256 3d526f4a9a1fc85759f03d6291f945ebc2b47d2e9e2ff4b05c52f10f75908d7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 23.8MB
        • SHA256 02a9dd4b96462794b03462f914acd5a62a720fb3ee9f9837256977392012a50a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 23.8MB
        • SHA256 f6c57be7bad0fcc5caa93e3c3f2cc9b39a038928a1c7935d813710844969f9c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 23.8MB
        • SHA256 42ce599d25c50f8ed84dee3289a9df2dfee6998ff5b0bd3d2aa99c90339c27e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 23.8MB
        • SHA256 5d161f9948e06e68b6437cf7007d99373eb7d95c4b0a6e1f189abf327032772e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 23.8MB
        • SHA256 6975623d20edeff59af0189441b9f68b0aa5f4c94ac0c09e852dd0af1f318e83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 23.9MB
        • SHA256 6b78867eb1028de3ff64c4e5406ced7b41136c6231531711af7c353bcbd2754a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 23.8MB
        • SHA256 d1ffe1ece48a93e2915a486ceadd846e4c1554c48edd6264e16e013fb41bc5c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 23.8MB
        • SHA256 d463137bc4a61ac0d21d1225432e68a66f050a1f223123e71d72d277dac3af86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 23.8MB
        • SHA256 aa659fe6f66069351561abe1996512affcff25f752236c1f3576b9d9f6243c4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download