Overview

overview

8

Static

static

3

2026-07-14...d_.exe

windows10-2004-x64

8

2026-07-14...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    136s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 22:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 13.7MB
  • Sample260714-2fcfdag12y
  • SHA256 36dee7cd235723ca65e17e644ffa355b60be4caca1ccbb3738651a8464b04138
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:716
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_35b32cf7c6d1754d8149797692e3cbfa_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4764

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 13.7MB
        • SHA256 3760695e3ae200efa12c652675a2214aa359d88722ba50b58fc98f518ac10150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 14.0MB
        • SHA256 f1a199f37040aa43eb893d9d7bfa9ee66dabf1bd00f6cf3ce59aa0c294ee2ac4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 27.4MB
        • SHA256 687801bbcbce6a21dcf08edca104c366655659097151aafb2b65d5d23c1ea579
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 31.5MB
        • SHA256 785246f090f1e46fa3cfec9ab3c54e7bea2509141900c95d16ab9ba0e0b112f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 27.7MB
        • SHA256 5ecfc171d30615000b05089b5e0c78e4f13820fc30a15f9673aae3a758a4e988
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 50.9MB
        • SHA256 1205df622e6c28dbde920c0d7a823679f938c7bfde25a47ec21f43f627f784c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 15.8MB
        • SHA256 3bc45c115ea7893bb1af6a8bbe2103e0f21017e19b7078ccc14c2efde9673b7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 33.4MB
        • SHA256 0d434609842b6534c72566da1a8a2a234c5ee2a45a816d93a4ab03d2a2c0651a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 30.8MB
        • SHA256 b73ebde23ccb92953585195567ce1e273e0b3c0a3a0dfe14a61f1dbcd31dd081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 29.6MB
        • SHA256 fd1106bd68c671622784e96839059a8ceb002ee66f3758d1d19bafed05b55b98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 29.0MB
        • SHA256 21b63bbdd379b57d0ce75456138a73849ae5789bf016d502f2cd94bcc150afaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 29.2MB
        • SHA256 dc310802f2221e990d0db75574856b10104e33f5f84508f4d0e8b890edfe43e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 30.5MB
        • SHA256 1f57252c80e7e6e2dca037e033a511ee722794c027eac2492279bcbefa1b2ece
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 28.8MB
        • SHA256 1283412698a172564fb93c32dbd910c4903f67dc35725ad5768df79fa0591b20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 27.4MB
        • SHA256 af21f29d24e3df22dc7a7dde5966f65de6b865a48c01e9ce7509471252564559
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 27.4MB
        • SHA256 84d60faf942af7e1ed93aa4775e876b7cfda297bf2973df76f704903a6cc6e18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 27.4MB
        • SHA256 588591c704c4d0854803d937229a2d848043a3ca3e436dd34f56acb488905441
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 27.4MB
        • SHA256 1ab781b0126541c557210d59adf3d42ffb291eb48a87144671c53d5b78fd4786
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 27.4MB
        • SHA256 65d1c86359b042da2e788527daa3f2212944a49c4c850315060515702e32b982
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 27.4MB
        • SHA256 18679c9e5e5da05fb9c63dbfad798d42f557f46ff18a42a0267f9eea49cdc536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 27.4MB
        • SHA256 3effbf895d33ebd085fb4bce21e421af927a86a3c6edf820ee060b14b5d17cb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 27.7MB
        • SHA256 79f72440ad590c1ef151949585ee674ec15cd54f173af9af319f548571cdc8bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 27.4MB
        • SHA256 b1058c5df1dcc0f76b3086f1cba5bf74db5e185bae197361f4f80de9420f9839
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 27.4MB
        • SHA256 7b7b1a865dc963689b8cf3fbfb3114fa3a02376b5c9ed46c95b358f5a6fa5f17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 27.5MB
        • SHA256 bddc2a97cf68385950e0592807a103aa67fad9778ccc63c53e48636592c0d79c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 27.4MB
        • SHA256 34b51c73481dd63f784c47b0efd8fee87ef73dd70cdc027704eaa9b120372959
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 27.4MB
        • SHA256 4a829434fb1c6817160974c2d071047bcb8e5ba150ec7672daabc2202eaa3a01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 27.5MB
        • SHA256 f57e2937e50d635c0c67abae1343585e1d1e65dd7b6ec14d03289d553429149c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 27.7MB
        • SHA256 49c481cd3fccd1562d0f9d0c6f399ffccaa95f1a5649722494df75cd693740f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 27.8MB
        • SHA256 0538484a6e8c2330633d28587a48be37840c94d462fda9a4909ccb395598abf3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 27.4MB
        • SHA256 9e1228da1db821162b49a5c50a33260e5d57ebb2549ee615b0ea5a94be726e44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 27.4MB
        • SHA256 f8716b6cb5dda43c553fe8ab381f4699500a0b3d4c65f0077f1f72fb266e8605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 27.4MB
        • SHA256 a828c69ec2a0a1649224483516395c567b037ba02735fca7119075b7b14df362
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 27.4MB
        • SHA256 1f962c20fb6ba815ef67caf1ef0a87192484ac233cc62931ed9e6172b1606e23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 27.4MB
        • SHA256 74e84644a48059d460762d150194f3c14667b13ab3b7cc19852c7e3fc1892f12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 27.4MB
        • SHA256 8a57d6fd733dfc5d3eb71e31dea281e51955f8f2e65a1664d9a70a1cf5ae8311
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 27.4MB
        • SHA256 cd445f37db52ac673a7d9a79a527eeba10d8080f05c3602f4574708b8d1f10f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.4MB
        • SHA256 3a06ee0dccdd5980c9273d46c03447d2bea7f022b865a29787e6a876af7d88ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 27.4MB
        • SHA256 f0d635cdfab2cd6025cd2edff00dabbd06b3595d1230540bccec526f5676cf25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 27.4MB
        • SHA256 e01525cd91abdd2a46efb02acc69216068881329ac9b8ad21b7e43fb78c461c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 27.4MB
        • SHA256 d47a6c8851e34184624b8b6ec306c112820562b986865ac2cce8437f9dad6e82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 27.4MB
        • SHA256 61ba84dc7b4778e0ec8fab33da68536a5e2966c2564e7a42aeb58c538e59e105
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 27.4MB
        • SHA256 8b409be0f8fbf161517ce803a30664f95916d56902c387b2da195e006b47ea2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 27.4MB
        • SHA256 8d235c1a5b81416816529a80f06138f0814ccc89b4e2061c3697ce89779c4bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 27.4MB
        • SHA256 59021231780f202ecf1c3d0358053a62a5f4e9c6c03e01e5b344f993c34c689c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 27.4MB
        • SHA256 6b4b3b44a671125729df482b16365e2ac3f82140fa7465032679a9fb35bec85b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 27.4MB
        • SHA256 78d2ff3faf8122004fe04459df5bb292929bdd8b11593b3d88bef2df9802e725
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 27.4MB
        • SHA256 63049534eae4c6bf82b08b994f5f26d4fa8e2bdf936b1c8e01043dac05cb0272
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.4MB
        • SHA256 7e55493c686f7e8e4dbe70f60002f13502809ea333b5bfdf0c11b4cfadc85eb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 27.4MB
        • SHA256 9784de5ea3927d8eba8739a47ef1762b85f14079e19ee414070dda75a37ab664
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 27.4MB
        • SHA256 dfee91b9088f99b33d33ce92ce6dc41fec6e4e641276bf873fab138d9feee48e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 27.4MB
        • SHA256 56d754a1c6e2d7513282877b06410811265d8e3cc8aab20dc597fa675da8eac3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 27.4MB
        • SHA256 d2a226d9fe194fbb032d332492e7dc7f18cee108e28e17958b8a27948448c238
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 27.4MB
        • SHA256 fe91e30ed5d821d93e9f430de9c5de21f58130d9b29e7e3a092be7863034adde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 27.4MB
        • SHA256 48fb4e8ad8751d4f1a41ec9040d6023a61c245d7731237920b0aa8cc5bc14455
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 27.4MB
        • SHA256 c711c40eb61fd16ba2894e0d44b9edf27aaa1dc8632490a2c56e524e46d0fc2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 27.4MB
        • SHA256 1e19297a49057f753279f25ea832fde67ef4135849d73fa1aadfd96e3cfcd976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 27.5MB
        • SHA256 92e64abbadae7ad236fa4bab2e093d4eeb830e76eb805913e994bc0ea6955a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 27.4MB
        • SHA256 47bbae7bc13fa64d1e5704eaec5dca20f1664286e3be458b882973ffdd041b1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 27.4MB
        • SHA256 e7198d090ebad4148d29f26ddf9ff8aaec7878a977b42c2a9c78fb06bf04076a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 27.4MB
        • SHA256 38b2e255b42898a5a6525846cfb693c00e3322d10c3ea81a19016c76b27a9cbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/716-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/716-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4764-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download