Overview

overview

8

Static

static

3

2026-07-13...ar.exe

windows10-2004-x64

8

2026-07-13...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 01:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-13_68a9f880a869afd49d297098546627a8_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
  • Size 10.7MB
  • Sample260714-bntrhses2x
  • SHA256 44f0f28b4a442f6ec009b01e5cfd9f73c188e2db5bc985ff23bcbccc08b23bb3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-13_68a9f880a869afd49d297098546627a8_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-13_68a9f880a869afd49d297098546627a8_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1164
  • C:\Users\Admin\AppData\Local\Temp\2026-07-13_68a9f880a869afd49d297098546627a8_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-13_68a9f880a869afd49d297098546627a8_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:412

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 11.2MB
        • SHA256 72737845ce9c213aeb6340297bc621668e33652cfe60f1696f5e42c4da999a48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 11.4MB
        • SHA256 929a274fe92c1f5c359a41de42f1d1bc5c05c2bcf06fb74636a76ab69f25bdb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 21.4MB
        • SHA256 9df17a57dc9d58f8046d78d5966d36fcaac49f41c7020d15c83a3bc18922f6e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 21.7MB
        • SHA256 3f06d13aa3064b7443c56c5d6da66b5f31aaf29a034e87bdf6395bceba635824
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 21.4MB
        • SHA256 dc6e7acaed2567db5da206c404c87191bc757cfa9019dc3b70e6b19048a6e050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 25.5MB
        • SHA256 56ea268ce34f42f7da2bfc0c819b04fc72602afdcb7ca662b45bac149cc9b3f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 21.7MB
        • SHA256 61d84591033431c7050a50ec30d1c1aeaf7ebf0d5c1eb16ac6d13839a9e0b957
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 34.2MB
        • SHA256 5470040d9a2cc35bf75309430b62dd666af1e93458262a5ccb7941b919bdeef8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 23.5MB
        • SHA256 b84fedcd393140710222a96877fa1ddb23c71ec6ff818298c33f8d717b5cdfb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 10.8MB
        • SHA256 bf929e7c1e5288c0344ca8d589e551d1e2ed3d82d0c5ca1f953f03c1a5ee0354
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 27.4MB
        • SHA256 311b871e998bf4f0843e3d604e442e46fa3f08fcaf9a5acab26d52a2d2dd71ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 23.1MB
        • SHA256 f4859df1d3d4539b38d5223f4a88fc79ce85377c0dbc190d32a70bab4bdf5b45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 24.8MB
        • SHA256 a5282a082d400a85441c38750b7abe6fb049433388431b86855377011bce0258
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 23.0MB
        • SHA256 fc73eb682ce620999a148e548fb5f340488bb9fb26babc917e5cccf7c69808ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 23.2MB
        • SHA256 13a3943d147fa16769c8fc16f7ea75cdcb349db975ecb4f94098f8c6926b2625
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 22.8MB
        • SHA256 6eb1cb00ea9df1d298884cb6efb528630b72a94c668ec6bf6701128be7c6a30a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 21.4MB
        • SHA256 270c20831a022ab8574302fa0ff21fa0c86a0503864b36a900556508fce6c9b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 21.4MB
        • SHA256 2be1fcc207374eb0779adf538a0e140b7f24087f534d7a32a2488acc420f948d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 21.4MB
        • SHA256 63b2e8169f53b63884f54c73d4650b5db817f960c88db64fa41877defacac40b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 21.4MB
        • SHA256 f23c2b4360d0e05d53402cb454ab4e111cd08a07fe268e380b5029ca4de04846
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 21.4MB
        • SHA256 f57d23001d3a77cdc2f6e1f1d45eebc53e9b7bb426c0932f0aa7677fd897c61a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 21.4MB
        • SHA256 25142f1e3538e7aa4ffa514ebb0e2e724cdc9ea05872c0cf47566082ef85e33d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 21.4MB
        • SHA256 f1fb4e7760756e5bda5f302f89b6f4619b7bf6e695489f56c70f2e1b09427cbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 21.7MB
        • SHA256 cabf0a34dfb34278cfe8d3b488ea574e19c60709baff7dbe69697caa2cdeaca1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 21.4MB
        • SHA256 58afaabb1482f37048ba3895e3a0bf4f27331495b18cdb4c9a2d541cfcf9ab7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 21.4MB
        • SHA256 2292b91290575d939ad180778c7dd2fd9fde57e8006a49f6ff532418cb6a82a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 21.5MB
        • SHA256 454efd129c30b62ead37559f1719c600a7f44cb92cc25936584ced4e0dbc6631
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 21.4MB
        • SHA256 2844c50954b36cde4156ca3b6ff1103c9242d2457eb0c4cab6536870aefa4b75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 21.4MB
        • SHA256 6c8c178e5fbcf8c6f43d3db6d054a1344ebf92700e010fb577aa99ab0b835304
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 21.5MB
        • SHA256 e58afa6d7157a44ce69f86696ff3d7b2be351e41e715937c59172c51c614818f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 21.7MB
        • SHA256 606ea68efef6056f726f0345f01a06b32d2a3412be59960279a828a952bf2341
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 21.8MB
        • SHA256 80e4eed65adf03ebbdd82e0924219a4ffb6ad2ae41e7d9c64dca8d8614aa4aae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 21.4MB
        • SHA256 acd62aacbe3926e7a367633c11e8b0958d88b3f8c3f2bd4713098fc69f8ad5c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 21.4MB
        • SHA256 e3267293146104f5974ab4d73a6237378816b51d1c27db2376dfd9e2ce668050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 21.4MB
        • SHA256 d5fe1171349757857a95816fa0f7cba7e74274e3364b55b5741632ee9dffead8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 21.4MB
        • SHA256 023f6731165af69f36b0efa3e9af452b72509930fdc80e9b1f429d079e0cf987
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 21.4MB
        • SHA256 ab9d0249467363685355a4d7c53bf1106284340574b56c2c524780d8000f554d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 21.4MB
        • SHA256 dc1662f86b8e75662566bc011fc744416f9165c757afa35e9713cbde75566b38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 21.4MB
        • SHA256 4a2779ce78a62d553604ffeb4a1483cd69aa31433a302a929ae2b1d0181436a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 21.4MB
        • SHA256 d8910a9b7d767bcb56d1b0a30d16cc888984b6646a72660bde7809e5810b4af1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 21.4MB
        • SHA256 ac5ed37e4cd1d6c1d2bff9baf50ea79c9581e37188e682a235586669516d1507
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 21.4MB
        • SHA256 86ddd3ac0cfedee855702f27102cd7b7195f89dc192c92f36f3cffe209b23f1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 21.4MB
        • SHA256 fc0700e6e0a410b135646c51c5ca42363bc1abc9adf98455f00b63d84ae0854b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 21.4MB
        • SHA256 461c572a309f823add3e43a196e5253c393103f04c2a3735e15f1d170298ff01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 21.4MB
        • SHA256 a7136bfe2ddd91ca24a11a03071ac691db3c89c0271ed93561f79884331f952e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 21.4MB
        • SHA256 0851cc54caa84aa6b6708d7d8c36855f118453165eb10263344c318efae4aed0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 21.4MB
        • SHA256 fbabdcfd40304983c35e2c7ccae3c9663b144fa6453fd9cb0af63c52a0e676a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 21.4MB
        • SHA256 c3358eb8caed9d869c610533b23417eced168642abc1582fed7b0239fcefeadb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 21.4MB
        • SHA256 fb5c7873074879b81221cbb56f0f5347e7343d9f77458694079f063d765678da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 21.4MB
        • SHA256 68620562589f7b01867b85b46b881246b194ae4f8c5484ae5389f3dfd9723d54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 21.4MB
        • SHA256 63ae56297958708e594cfb4cd7abd62d2ebeed097591f2c63c225c55c843f70d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 21.4MB
        • SHA256 5941deb71f3e0f98ca16e1e8688ae488ec25b6fb7c822fbf6d874b94104c75a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 21.4MB
        • SHA256 199cd7b532b6b8eef03869d997f2204c768528799562a3f6b871938a7df3dcfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 21.4MB
        • SHA256 5b2b6bb77d9c5c69b7044d428a93cd01318fd434da5f994220cd81ebeb004f05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 21.4MB
        • SHA256 6a5f9d93bee07f4873eaefadb8f148f34a935c0c421ad6d6761c25a79821dd87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 21.4MB
        • SHA256 8a9201c0dbd6a8beb0de472b79bac656715f9f6ded0902ffbec85e60ede940e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 21.4MB
        • SHA256 f43461ae1433e59afcaf478bfa1151e849186289a8f067687586241296312d09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 21.5MB
        • SHA256 dd8dc90a090100b2314c93a133579586c81a1e9bac3172a360051fabc4a7680b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 21.4MB
        • SHA256 703c60e73927fcf36f9684d796854d78b11b74b8e7d0f4923b611cf6843968b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 10.8MB
        • SHA256 6f075cc4d97e4fbbee16476cb5263548c6c389b7d01b4cabc7ce4f9160104630
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 21.4MB
        • SHA256 be16e8372f1d8970b40dec7d05bfc58336d3c816240a7951abac1b6756b67c0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/412-30-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/1164-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/1164-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download