Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    30s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 22:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_0e2d9c368c2e346d67558b4790aa0ea0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 27.8MB
  • Sample260714-2nva6ae16n
  • SHA256 216f09b2b13d14d6075734e4a9dabf5c2b218a45e685c487290739b0559afd5d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_0e2d9c368c2e346d67558b4790aa0ea0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_0e2d9c368c2e346d67558b4790aa0ea0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5484
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_0e2d9c368c2e346d67558b4790aa0ea0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_0e2d9c368c2e346d67558b4790aa0ea0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3224

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 28.5MB
        • SHA256 28e160db27dbe9c349abdeb33c208e62465f4fe1d1e930efa6dec7d15daf3c7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 55.6MB
        • SHA256 7f7b3e19e787270996f7805648a69ed94738390ea07e0316eff7d126f259d541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 55.9MB
        • SHA256 d079e264851b5bd6f3aa74ae8955c78712e8ff681260417b292e0e853cc34d68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 55.6MB
        • SHA256 20ee4c56a18163f898a2bc5be3e7da9d5281bcc7de23d643a39a1fa9fa2a3679
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 59.7MB
        • SHA256 38ad787e9c848dd713a577fe9a4520cec6e67088cee26f4c7872fdcd847cf1c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 55.9MB
        • SHA256 e2fb37f3020c9fa02262559d21f9b06210b69d2b19733db4d6e2d2201c146f0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 57.7MB
        • SHA256 9d4a27c4a00a4f0c97e745183d2388fba2d4ebe31303eeaff136417da4173667
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 45.7MB
        • SHA256 2bc155cdd80d1ca7e1b08ff96cb0752d807eb43e496f437f225f73988ebd1ef7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 41.2MB
        • SHA256 bf5c434550ce1f74c266d2a4c14c7d783b074b5d4087dc1121a53b0b95da47a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 48.2MB
        • SHA256 ff25639d4c3e19797f31fe50c7b43327d05a3b5cbfcbfda49ae11d2f2687f5bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 47.5MB
        • SHA256 d5855bc3792d4b73c10ee962417b85f3376ba4b60ba880e2475a78d7ef5ca03c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 44.0MB
        • SHA256 69034bfb7141db691b668d3cf7ca1b979fe9825011bf0479588aa2ba49680a24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 43.4MB
        • SHA256 59d18efe0f0d38f03afc53c325ba2e695fa3df0fcf87e4fe7d8c2f18ad949134
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 43.1MB
        • SHA256 e25a564f8bc335c9a8f7fa210d565c161a04073678a2f3da520cac7e81146e2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 41.9MB
        • SHA256 25a0758af246bbfac0949330ee7759294d28b1b73198b606f0e73c1d31a28bb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 41.2MB
        • SHA256 5c18f31e4e82a3afab9f6e4a781cdaeb30868c7348858981a63979e612ff9df5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 41.1MB
        • SHA256 ed493f185cde7adfb01979747bc7ca0e2b514b235ed5c9d6707afbf0b27d1d5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 40.8MB
        • SHA256 8c0674afc386085e029375f3353c9656a6adec08adae75058dac0f135f1e6565
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 40.0MB
        • SHA256 d4fb69bc8f7c45cc632e4037e340f6052a82dae63a27af862c9e46f66f438490
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 39.7MB
        • SHA256 2051059c75bfffcb1de774fe623faf07cc1c6df60f397887d67590b13919b2df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 39.1MB
        • SHA256 454dc7ca0a2db091f217e87cc93f9b8639f963a1f70927b117483a02042b4b86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 39.6MB
        • SHA256 8b961ca67b2a875e4cf08747f6a53015389bc3cf62bacaccb41745fc4b82c9c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 39.2MB
        • SHA256 ca517576e7045fea7cb48235f52ca11a5e368404afc0d66bd60e0e3a0f420e9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 35.3MB
        • SHA256 0b6b4f878a2db6ee12844d49d9d6c00587a7fab8127f1e52ca64f396cbfaf0f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 39.2MB
        • SHA256 a441551c29f42a097b04f5fd73d1a5bbb579324707969df41431807c5573d53c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 38.8MB
        • SHA256 3c7548fc37d5a19eaeb292ec248c52171c2a311a65755abe89a45da8a51ed081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 35.0MB
        • SHA256 0c979ed8540bfda8c4cea800c62aa529d1033f11250fb52cc8861be1a83eda2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 38.9MB
        • SHA256 8137d11ac7058f729604970e87fb64410272c86c664d3d4d4466acaca479f14c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 38.5MB
        • SHA256 41ecf71211c39c56d78ae006a1530c9059c295780bc71047e930f1a0a227473b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 34.9MB
        • SHA256 fe68048f521128df6fc09517d3ef7e8b3d3a2068ee99ef55cd564cb339422cbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 38.2MB
        • SHA256 d22657014d5b5db3c8b8ee77f87af77d52b54bad637d065cddf66fc4a7676347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 38.1MB
        • SHA256 906d89118b3d7143ed2e090e7098b5f26335053c5b45624532384a79e7e60f31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 37.9MB
        • SHA256 f00fa76b40ff029fc586f890615b7df267aedc08c1a43fa37e49a3a1c6f14d87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 37.7MB
        • SHA256 bbfa2cd9fb23e8fe7bcc235b9d780793eacaad82c4a01405840d6b1877c82ca3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 37.5MB
        • SHA256 e6e7d3d686dd232c3933082485633d856db72a5d0176043309335ec151af4e49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 37.2MB
        • SHA256 d2a49c7747ef8e5136fe1434bcb979e55f7bb8317ff5de805da9c9d2633f094b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 36.7MB
        • SHA256 f60eedd99cb7efbc6bd48593c883900223fbd892e71d44eb6cd83cb27b0fc177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 37.0MB
        • SHA256 9d6018f07f29114e8919d6caba369e73006c431a33a663ab860ef0660c303fb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 36.9MB
        • SHA256 b22b11f17fad9473c3a4d93b8e311d16b0021500b7db1f65a275e3c71bd956bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 36.2MB
        • SHA256 da10298b90f092064793dff6689c00ed4bbbbae8f8ca4eaf9e61a9db893129a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 35.4MB
        • SHA256 aa2e2c323d82c40355c463bf50c12b85f97cc93237bbfadeb05021be13e00e7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 35.1MB
        • SHA256 4a8d006863c915e7501ebf715a220a126a904aef1412710cf9be93798e67e0d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 34.8MB
        • SHA256 b8f37f27d412e793bf9637f568901b50a931a9e46429850971bed7c3d2ce67a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 30.6MB
        • SHA256 646209b3c8dc75ee30a7809a4c07ecd719619d642d720eb02517459e6ba9e88d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 34.4MB
        • SHA256 7ce8ab295a5f20125dd37028bb04fba63ef9f9b692ddd7d060eac179766b9b41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 51.5MB
        • SHA256 66f4889c8db9be81d5c48c8fb9bc87d0f7322732858678e6368ce12ef5bc1162
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 53.2MB
        • SHA256 c384f87721b2dbc2320163f2a599a4bf4fcb17a91c26c4dfed1aa32d2e8f4635
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 53.0MB
        • SHA256 a527f7196faddb5570f810f3304e93b4161411dd24b4c5a64532ef1fb400c6b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 50.3MB
        • SHA256 68d2a7c594084ec2c6b26a74a965b012fc0b3788bce0df104c53379d1fe89bdf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download