Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    49s
  • max time network
    122s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 06:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_cc557d5abb4be781b9a7eb0a670a57b7_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 32.0MB
  • Sample260714-gsx8dsfs6j
  • SHA256 36bef851d5256196612c394a18f3f8c238f688926c12477acf878be7717fd9b5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_cc557d5abb4be781b9a7eb0a670a57b7_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_cc557d5abb4be781b9a7eb0a670a57b7_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4448
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_cc557d5abb4be781b9a7eb0a670a57b7_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_cc557d5abb4be781b9a7eb0a670a57b7_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:764

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 32.3MB
        • SHA256 83c4b5e04441d83b989b49f56d1441632ccaab824f48c7e578ad2aff230f0a41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 64.1MB
        • SHA256 ad2169547bab6f124ed2f300bf11de429d95bede2a5e2b2a246eca53d61ac5e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 68.1MB
        • SHA256 5302034549cae77edc870fadb3fb84b82e6bf68260d59cc708deddefac2c8b8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 64.4MB
        • SHA256 4cd15a1d00bdf4005dc79ec0abcf52807e6eb38f77625834beadc9cd6dc0ed0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 34.1MB
        • SHA256 c804e1f1ee7a7e7ea276ef15de8409d429852edccca9761846f16a58bd241eee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 64.1MB
        • SHA256 5b05ff45fd85df06f6ba44390c616f6ef93c012ec38e35ff3eac4c7720dc1658
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 59.8MB
        • SHA256 5a42518c45b002f82dd31eb2c532c240b2d17c8764c6cbc25e25eebfdb770d67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 59.1MB
        • SHA256 dc6e99418f1a006f3cf7ff1e15317324d02d361248f6fe1a140cf984b44bd7f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 62.4MB
        • SHA256 c90afe40ea0f5f641c00f9d0c3bc935cbed4b0a051b729f03be43a3d0113a264
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 60.9MB
        • SHA256 3002be979262a1e28a3626949c7a94b62b71b3939a6fd092c382f28727e37878
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 59.6MB
        • SHA256 b63bdaba530d99349d4f9580db86bcec4e49c90578149ffaf166d5bfbc1a7969
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 56.6MB
        • SHA256 eba899b5bc31200051d71b08aaa23ceda3b94fd5fdf526a0b5572a211d89b93e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 57.2MB
        • SHA256 62aa55a7b441269dd7cf82a1cef92664598e545c2f08eaf44babb589e21232cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 55.1MB
        • SHA256 e6a033edac0bc4f2d3b295962a002871cfb9aed292902a86d1d4e1f09f192d4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 55.5MB
        • SHA256 5fff5d0cb162d655c0a278f35c8687148026800365eec94bdc37b99bf2b66727
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 52.6MB
        • SHA256 a9305adfbc9c80a9446aabec4c2fd01481bfaa3593a64a4591cb5e413b485767
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 52.5MB
        • SHA256 3a2638ce201d0af300e411487acd504cf93e894c320215163ec081eab6207bec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 51.8MB
        • SHA256 407a9055bb1bfa50483e980293602b79cfd9dd314d2d29f1587aeaa7df18e192
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 48.8MB
        • SHA256 4720e79777a408368253f3ba57693ac9f0ae3d0d8b8028a870f3561c71c6b02b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 50.2MB
        • SHA256 322013ac847d1a6690ab97d70ea8fed02f930fe1d8f48a5516b8b98605251373
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 48.9MB
        • SHA256 02c1932d00a89bc2ee206a5a86b3450277e8d9e1f663673598e38da5ce76ffdd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 47.9MB
        • SHA256 2e3f244347bcd8e98e88481dd949c3cfd80428136382a130b47204520fec7b6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 47.1MB
        • SHA256 a29309130de1d3ffd290c8ebf002c3763f3a4c0d54683b262c4bdc5547cb85ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 46.4MB
        • SHA256 41095d75d6b1be68ea286c3a958cbbfb4a1b4f84ee9223353ca5514b7f12d0e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 45.3MB
        • SHA256 3e87cbcb6bb6b7a6293253e81dffdb4217f3b337fff6ff167a72ae8aa5d1eaa8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 43.6MB
        • SHA256 a2641b0179f41953e81626e90f2914e3ae0c363bfd5c6cda3c1c693e6191a2c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 42.6MB
        • SHA256 ada4dd37a91c9e415e560f2420e5c1b6d2a48acd406a3475943891508d2f3dc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 41.2MB
        • SHA256 2d8d8fe98261d23edf0bc53acf4a5617db990329af05a9f166ebe51256f9b8c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 40.6MB
        • SHA256 eaaf05f1351a72b53a603aada05833eb912ded45614268b02caa6a49040180ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 39.9MB
        • SHA256 708949364bd0ec17a55a8e7064a564e414c181882614ca3d752e3ae512316ea2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 39.4MB
        • SHA256 f91b28d16c90ca1115905861f673cf5522ad894507181ee7b9085642c8222e2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 38.8MB
        • SHA256 1a698dcfd8c114e2c0aeb1ddfb03a2f263f9f62ea980d41ee9d5b8788c8d5c77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 38.2MB
        • SHA256 8c80f91c3bba1c80eb5fc78512fabfe32ef065ae148ea265300d22cc32350bda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 37.9MB
        • SHA256 36b6e14627701ba2db451fc751f419975a12546632cdfef96cc64646a78df168
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 37.7MB
        • SHA256 3482b752d8dba95f0482e765388d9a1ea9db8438e24e9b14e1e60c9b6eaf8d6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 36.8MB
        • SHA256 224b9e2b7f172526c10b29783bce964f0b043fbf96e0ce86068bedaed5b2ea71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 36.8MB
        • SHA256 22b34cf0b4b387ef638138417cd0ceb2ba00a57e693e58c58d9a52e4b2b088a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 36.1MB
        • SHA256 060efe058eb6a2c002fb6a0dd8c747c79eec12e84b633fd3668eae5f14550125
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 32.0MB
        • SHA256 7799c79740b3a0eecd4ab3282adf421d075b2000de0ee417078a966fe1fdf025
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 64.2MB
        • SHA256 8c58e2854a70bd30a041176d5ca168bd4f0f403e7a9ba0f662ace84e845e77a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 64.1MB
        • SHA256 073d1e0d7b9048e6859aa0ae9fc6f0c570308bd264ca11a067f554ed97f40682
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 64.1MB
        • SHA256 1dfff226d6ccab1844eae5628d898778b4b77ef73c1d02c22cead05a63c313bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 64.1MB
        • SHA256 e2e9242d4ce993a89fb23807647f4e47a30ec8c87988e4d0587cdd276ad59755
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download