Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    64s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 07:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_293c71356bbcac018fbc50b723388e0a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 24.6MB
  • Sample260714-hyll8aay9v
  • SHA256 567fa757fed7cce712d43229873ef35f3675f51554d6f752e916b8b00f585424
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_293c71356bbcac018fbc50b723388e0a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_293c71356bbcac018fbc50b723388e0a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4380
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_293c71356bbcac018fbc50b723388e0a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_293c71356bbcac018fbc50b723388e0a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5892

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 25.0MB
        • SHA256 c8552f276d5b1c39bf721de7a1da9c9c9cd41b1ec89fe8e4fdab68fdc894bd94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 48.1MB
        • SHA256 bedb698e670ba8fb8951596bb69bcebc388453f921a58f3a14116a11bbab8ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 26.8MB
        • SHA256 3e445f0cee46ffdfce0b1563b26df4e521b1b2aea446d252a31e830b90637952
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 49.4MB
        • SHA256 7424b79dc034dfa7aa22dd0ff21cf2afca98e5e0730f19265adad0778f0b3f73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 55.3MB
        • SHA256 a779e77964f860d746d91af1136d195073d1fc55f12c5ec3a6df873a1cd55170
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 51.0MB
        • SHA256 ceba203ce77289c9cb883f9f2c5159d49af57aae12f5ff21fb798b43d64f8198
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 52.7MB
        • SHA256 a75b397fde9c938de3fab38b4fc96e4d6dbb8464b3082f37d7d9033bcdb3a3c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 51.5MB
        • SHA256 902f2178a7e77f9eb7b035558853488c3d1d05069a87e397f0a916a435221521
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 50.9MB
        • SHA256 ddc77be5e54c61c81177fb89e30b94ec6b4660204952952b8eb72dfcddde0487
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 24.7MB
        • SHA256 4b141ee838837821d419fd837d5bb1f46a4997af0762393ff698a7f47443d0d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 49.3MB
        • SHA256 b97c0c99947deca070ea52d3fe9bba3eef7b249f62f62b0687e66b9674adc77c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 49.3MB
        • SHA256 10397476d77cffd0c6dc3b91e96f1aaddeb7ebf0757ad1d617162b58dd0a6d51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 49.3MB
        • SHA256 e363a837db56c3cbf8d24cdf176c4c21ca5feb1cb64d4df3deeaf97c20840890
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 49.3MB
        • SHA256 42466c056cfb40f65c88a38eebf36121eef8552cfc9f42b8f6c012564ff9bae4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 49.3MB
        • SHA256 ebbe1c17b65d18cb64fa6005c000f383d5bd35c6877b07825e970156977cfd0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 49.3MB
        • SHA256 8e929d9b51cfde7dbf1c9d1922903319023776aaa916ec369baa364f4959c70b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 49.6MB
        • SHA256 1da4cfcfc08fa4a94941642515fd995857202e5390b02ff1dcd2e3d40b4d3385
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 49.3MB
        • SHA256 6627047017eb0d24ca4983b2e9060682579ac339ff486bfac83523a4880197e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 48.7MB
        • SHA256 eefa187bd3fca2550e02230a764cac53b0299395e0f28cdb8124f5815dfbf84f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 48.3MB
        • SHA256 a198d3f473aa2cd3a14ebbf519de89efe3a098c50660da5e13ed0f4e600556a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 704KB
        • SHA256 18436dfdfece88e43ad449c750f28740c0eef6ed7809ccfdd94fdf608974fcca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 45.8MB
        • SHA256 4ac9631e5006e99b87ee56b534d2d9c1cd61a00fc4ea2f71897eeb267e1d13f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 44.2MB
        • SHA256 6a3e051e6479607569fe24373621e6f0b772b470d558aa1ae6f9b9e1af8f3aee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 42.2MB
        • SHA256 1d5d769072fed73ec985017f0ea72596c7f424db943549993e4998fab586c44e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 41.8MB
        • SHA256 ce2b80054a3092b940221220ffbdfed38e539a420666171cb897cb2cc1926ca7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 40.1MB
        • SHA256 5ba00edbe118260a88e9010096f816aba46a60b5e1a7dd5155b1b45bc6530802
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 38.8MB
        • SHA256 5f617337821101ae148b8cdb163cc147581ede2ff7fe9cad7e9f6f26f262a5e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 38.5MB
        • SHA256 9a61b31e50b03fc9b7a0460be0457937b893c02aa5ae3122ab0b223448cba356
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 36.8MB
        • SHA256 b6c108fa7f169bfc9373ad079b3638ab4950436a0241ee1e37445a556c0f6f74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 36.6MB
        • SHA256 2da5f3a0f488944400cb051619670fb48c2109dfa1313a082dff25285dd0beef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 35.6MB
        • SHA256 662ab68cdd316eed75ce4355f08df69bba947fd3dc1da7dcfc550dc181cc9925
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 35.0MB
        • SHA256 0f113dc0d2f062e0054846850d8843e5cd2d09670d5f75598d94309f2a76f1ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 34.9MB
        • SHA256 d0b695164a94b21fc0f10aff56cc89488d31886a8c36506cf6879b4e97956211
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 33.7MB
        • SHA256 4b1c1f30a4f4ad3333b8f4d5cb2eda2036f0910798c482d5f5b5573dd77c8b6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 34.5MB
        • SHA256 3bc0f8b1d7c5e8ac4762f660e3292458a7846bf7432ce8e3e97813e93d51ea36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 34.4MB
        • SHA256 0292fa285408f29ea32de0b4faeb59c92a975b713b2d8f81081669815b6433de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 34.2MB
        • SHA256 372ffad6f63879807cb008b02616a42c49cf13f4f27ec7dee916d0360ebe8cc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 33.1MB
        • SHA256 2813f741663f7f8cb2b79471ae2057f3425d5be3b124a76edaf8c8da7101fce0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 32.1MB
        • SHA256 f3b86f623894c744f169155cebd65887de205df488086a1a723f9745e7ee86aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 31.2MB
        • SHA256 3c7e8cdc19bf81c9e2774b5fc28fb0a896f9f103b0cc230d0a8b8aabf43ee846
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 31.1MB
        • SHA256 d21daefd69bb61ae97ddcca5a82df2567d0b61334ca1757e104034ef3f757fa3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 30.9MB
        • SHA256 dc3c5a89dd655a215fea875fef085453c6629ad942f7156887143bd87204bd8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 30.9MB
        • SHA256 18f1088ef466fcb31de9a8ffe98c03e5d83d7d62c5ceaa62293cfa68e5b68128
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 30.8MB
        • SHA256 142887ed48e257e308a4a7263292ab570d07e2c2ec63785c3c52839cd86e9a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 30.6MB
        • SHA256 d8cae7b26f8b916435773d1de20c0e2faa023b1c7388fb294b7eacfe8fbbb75e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 30.7MB
        • SHA256 d2da37384444b71daedc3e528bd94c653e6f6fbff472d9606e80c0faa02c74ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 30.5MB
        • SHA256 3f8067f9b12b7546fe3fc0f5dba4d6eed7062d258ce5e88e75f1aa79b0c7fe61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 30.4MB
        • SHA256 df00b5689763d899db153dd2ed44275b953c30a4042e3af087de9e047d897633
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 49.4MB
        • SHA256 147abc8259374633f104a22f4c30bcf4b8dc6673b5939eaa16c35017f2db5e1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 49.3MB
        • SHA256 6c10d86ef15070c1b5905cedefd2b19484cfd543c0683bdeb8180dbf8e80cc2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 49.3MB
        • SHA256 ba6bf9c7aaa230066aa74dec8837f8ff065db10711c26c1fd20674ab7cea4c1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 49.3MB
        • SHA256 e98c0ad784b6f5e2586dab763a101bee66213693192ebcb02eb4e499749b0146
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download