Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 06:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_a041c82f380afeb50137196223329e13_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 16.8MB
  • Sample260714-g4wtpsfx6j
  • SHA256 605848195d14c3fa885a1bb5148934b6119e459e474bb880dc8504f10a36647d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_a041c82f380afeb50137196223329e13_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_a041c82f380afeb50137196223329e13_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5948
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_a041c82f380afeb50137196223329e13_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_a041c82f380afeb50137196223329e13_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2288

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 17.0MB
        • SHA256 a6fad303e4d6f870b646b9d232a97a9e59203ab4065c47052ae570626efe93d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 33.6MB
        • SHA256 4836884c241f2ad3d05d82edeaa8a38844b95b9b09585241826d05a9594799d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 37.6MB
        • SHA256 a71ee4870c2f9a68a4e0946bdebba4af363075a13ea63995772129b70d995d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 33.9MB
        • SHA256 c2ce6d48b12ed4656edc6edb0065ab3606475ed1adf3dba116acbc5cbc333fe1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 57.0MB
        • SHA256 5540fd1c7ca26b4878224c0ce3c3c576d3bb50ecb64a0dcf4ca5ee8782703e18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 18.9MB
        • SHA256 9a053a165990c9801373dccd23ca369e2f73e40f5223674744088ad9f167821c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 33.6MB
        • SHA256 1a0e99039e59aa156382a4081373c1615d41079b52227d0f5af290083b2994bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 39.6MB
        • SHA256 8f6ef1c5437856ffa1c9ef0b2099b924d947449666bb793fe9879b09d389388d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 35.2MB
        • SHA256 7d5305378c437264f46998276e0020a650179e558401e0a21c06f61fbba94a81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 35.2MB
        • SHA256 b7eab914549b9f3d11dcce71b85215bfe99343acc76922f0bd6356fc76bb1e8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 35.4MB
        • SHA256 e97d67b9225f401627cf4830e7c8f089afb7b1232215e793d80d20823b735a15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 36.6MB
        • SHA256 38be87b610225e3469d8b066035bf75dce6a099e9b3027d32c26374bafc18efc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 34.9MB
        • SHA256 44a9f80940eff01176503dc760d3576de3db2943a888755cc227f3dcb4415594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 33.5MB
        • SHA256 02bc69772cb26d0643e85ab15bc94a479319ed5bad51f6d4f249ee704ca4140f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 33.5MB
        • SHA256 61494dd6b7ff246fc30e5b9df7b6f74320df0aa4400a0ef56e896021c5038e2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 33.5MB
        • SHA256 ee05b5514a7bff41d9aa66a0d8ea19135e1f09a733eae5e4c129b6dfae7d73c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 33.5MB
        • SHA256 b024570e2e1bb66e0051f867ed9bd05ecf441ca0580cb025d2c7809b7043259a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 33.5MB
        • SHA256 11ff966a29f0914fd6ce6a538c455174a223e37dd9c289c50ee0eaf244cffcbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 33.5MB
        • SHA256 cc70812f4fb24c7f8411f9d8c283d391b9d79960b97b50168e08ee6a002cc715
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.8MB
        • SHA256 88c434e684f3bbb479e44b694a6634bd4af59cefed427ee85263859eba3b1f9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 192KB
        • SHA256 c61d5a2b5856b5a273a4b636240fa277afc38dae069b227c270bb7f4cb23e995
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 33.5MB
        • SHA256 6190e1fca345f03c13ce59da11ee13db44296a5b924cdbe8253dd3ba048f0ebf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 33.7MB
        • SHA256 bd99e0662afbde0ee59c7474f2b5994c61a18d6a4772d8347f76532f3503b798
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 33.5MB
        • SHA256 c9b4956fbd7f7c4ad30eea04f5bce0648615aad55db3a43b7ef42e6332d1d761
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 33.5MB
        • SHA256 76b2391841f083344a7ee4510c6140145fd5c520c5ecc5c5f60b78b5181231aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.7MB
        • SHA256 e6eacc36cc774895c66925a6de8e093e9a6b8dbd354ed34ec49484354c59e4c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 33.8MB
        • SHA256 0be1da3cc730180f08d2aeb174dedfd2e0d57fbe38140b8955644633ef2c4fee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 34.0MB
        • SHA256 22b7b1c3b409bf229874ce1d20f575cecf3f298050b8d355c1b9c5ec5df3f646
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.5MB
        • SHA256 fc76d0d3b1829293ddbe725e55627e3bd96867523570318482daf12236c49acf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 33.5MB
        • SHA256 f10d132bc45700c4888224f6aa910bbb623cd09bedb7c557e4b83169ec01b149
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 33.5MB
        • SHA256 dc34cdaa77a919800f9810d06f2c31e4fe4562c94e59d2eb1f95ad5768b55642
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.5MB
        • SHA256 d4d6c9feb42570d2ab7e31807e2c4e47023efcc38970ad3cdaeea267d4720d1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 33.5MB
        • SHA256 4aff2c8454104d6616de7ad27b3d7e2840b10b3c9ff741dcd91510b0e675cbf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 33.5MB
        • SHA256 392bc05bab74eed242449e0c230dc78e6e900d6cc5b64342d7f45eba213fbb28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 33.5MB
        • SHA256 2d4735f8e947c624c3a7bb07d2775df72da3dc28cac486b91d5e390650a18101
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 33.5MB
        • SHA256 713cc9a7fde7d221da1eb88920138b2e4f82e5a13688c3b9ad6661251c4a9f48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 33.5MB
        • SHA256 2ed5741c5bd227231099edaf2f4b9b7bd5094515a8d07b689b1f9ce2f5ed40b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 33.5MB
        • SHA256 45fa0c481278318ea654aa210162c9f82d370897e58ba83e8f25c7bb1670a40b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 33.5MB
        • SHA256 a7bc3e5d9ab546e47682f597f91bfe2e0ea465c5966038958e68bcafdd0d0f45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 33.5MB
        • SHA256 fb622a799806a05ea7e42e58f26f3877bf128f43651c5a1c2cba5787767cd1d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 33.5MB
        • SHA256 be21151971bd800d080a4de280ac89d18d372ed2962fc621bc252eab5fdd33a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 33.5MB
        • SHA256 b29620c48bd0a2a21f85aa060eb62f1d320e5384dad896a2385e8e4acced23f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 33.5MB
        • SHA256 ea81e19f57368d9ab2af49625139086c3541f92c8fdcda5998fe6b5cde3b3e4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 33.5MB
        • SHA256 ccb1a209cc1b61e3a1a51aaa0ee4f54e35e4b4a71909c3688384417bef6ce14f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 33.5MB
        • SHA256 f5012eca6f2ff39bba57ef97fa9f394f2e7bd17e3c6e84f4b78de3d4024ddfc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 33.5MB
        • SHA256 6a883173094916b0e1dcb9db3265a7da47d948bb0bfc21c07c7914585b1feabb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 33.5MB
        • SHA256 dfb40dc9be8b27391cb8a8ae0e3a6e18f7e3788790470cc36023bc8b01b550cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 33.5MB
        • SHA256 bee6f42d9216576319cbade6235d8123e19cce69b0202c427eae44eff0ed3aaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 33.5MB
        • SHA256 8628a989aa57732e0358a0ef4c28263ee3e941237311d082b45e722e67fcfb74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 33.5MB
        • SHA256 f12dd775e1279607808bf4ea2f68fe3dd925af220a9f53939fdf1be4c2ee4edd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 33.5MB
        • SHA256 823c3f69aaf3a7c8b7e755e98ea9f00af1e9bb959ed5bad7b15b9f87e57cdd78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 33.5MB
        • SHA256 281571738632a3781b662b587c7c591ee8f50c23f7f458ca489f419c6f1711ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 33.5MB
        • SHA256 a31b84a3197ecb2a32c5ed6380b4de3d47194ef6ba8115e049a8c28f28ffdead
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 33.5MB
        • SHA256 7b0e66ad2a3fa5a7f57bcc20e3375d68e50dfd2665983d1c3348256f8e98fa97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 33.5MB
        • SHA256 e952bc35d6dbfe85e2de75e163cd7524abe3db27c0e755b688e8766b69f3377a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 33.5MB
        • SHA256 c960d06e9d5e3e897b53100a13ada17ac2a482e2c42d981a480afa77f95d593b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 33.5MB
        • SHA256 5840ff204fe0718a1a3e2d8d82c9a84d0817e10124b6c5e31db537e7c89fee76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 33.7MB
        • SHA256 80c04849fca95da1d2de3a167aa8d2d6db57ab375189770416e03331a6df3028
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 33.6MB
        • SHA256 d5274e09ef34f44cf6bf552f3c983678381c6fc5cb83afc03b68e7397f2b1936
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 33.6MB
        • SHA256 01983407fb3d7021c5189ed4cb301b7417ad7d06695701c08327bc1b1b2a0311
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 33.6MB
        • SHA256 aa6e6ba892fc5e0bb232dc24603bc257bada7cfdfb822e2985b69d67b45ce7ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download