Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 16:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 15.9MB
  • Sample260714-txk5vabs2x
  • SHA256 4e9896365415a06f4257737da6950f49b41caa4f286e0bbaa57f06c1871ab209
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2972
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2328

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 16.1MB
        • SHA256 fb8d6615abe704dd0f5c16965e656af2c503c9f084c99ae222484313dccf8439
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 31.8MB
        • SHA256 1a310104e9108ba95badc3725ea670576ab453355d50a1d8cb6a78a28d4a2b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 35.8MB
        • SHA256 b15024932885fdff89dc66748d9442629221505048169b907f8fe794e7002bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 32.1MB
        • SHA256 9f3af3f2c4b481da4db1c9b270f2db339e8e23a604cd661150930c7b9dfaeb14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 55.2MB
        • SHA256 82219d9807ec2d1df6de7bdca1e38743b96abe7d705bfc3cb9ab52ebb366de00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 18.0MB
        • SHA256 434a9efc2d53ce64298f8b9374c06242615cbcfda6bf57b8f2426c49447546ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 31.8MB
        • SHA256 e06f8f9a2582bd04d0367ddfb8776795c061ea637e2a767c5eb4079fe052859e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 37.8MB
        • SHA256 6c79b2764a11c2be9325af3a35e3a92ab766f6e761d887a20d78c31dab64f4fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 35.2MB
        • SHA256 1cb2830c663438867be2a9f6cc13f2ff985f453776346fa7b44d9d32f2b9714d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 34.0MB
        • SHA256 49c49a8e2e4ee9e6c7a0c63fc0ba644df51cbcf874e041e5c9b56c6d99795b51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 33.3MB
        • SHA256 30af080cf6d2c0335473c30f509d9242975a7c76c57e2ca7ff2ba70f9034ca16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 33.6MB
        • SHA256 7de3bd8beb4cec8754c46e720788a5387d1f23503b69ec72d17b38e5e9ebdb53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 34.8MB
        • SHA256 cda4d3fb3e431b77fa01ec7d96c5ea0c77fd5bee973537a88c47044949c63668
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 33.1MB
        • SHA256 4d9ca14d66339bf4a4085da489efaf0c6c8ebb3891e52077af5ea2b121f17d0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 31.7MB
        • SHA256 c17a7601ce5c65b714f9950f9a80562b17e09cf81960fdabb14281ebcb41b574
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 31.7MB
        • SHA256 fb2b0b56e06fce1f34c035df15d06beeb7ef6e15c05018a2f4ebd4bb3cc6bc51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 31.7MB
        • SHA256 331473a8ecf135ebed8511f48c04e7e1bdde5faed34fb4630fb2d108ff2b1afd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 31.7MB
        • SHA256 29b7bb9f765b889098daa4092fe0792bb8e43011f10ca4634d669e0ab4acac1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 31.7MB
        • SHA256 e5816fdb04f491d4e64e398fd3e0840c12ba09e37d03d39e067c403b1aed6929
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 31.7MB
        • SHA256 c29ec380ed5b0d1b7e1048e93a5886ae6540d83508fe7132f85aa20d28b870cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 31.7MB
        • SHA256 efc5d81e6723b4633808b4ebed596e567f24871ec7f33491761542e425baa3bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 32.0MB
        • SHA256 6d688afacf3f81bf9bfa3902f41f28c6cf51ab4f1750aeabe51a5c3896426918
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 31.7MB
        • SHA256 0fd3ecf5674139239d7b5a45c1df78ced767911236dac50af1096f816d955d99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 31.7MB
        • SHA256 f3bed975e289a2388e9c5a4d6a4d4d53faf75b9fbedab8a7cdc38c3de4a5dcd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 31.9MB
        • SHA256 f9edd4254799cbada9c4921e10f2350ac7770df343a15b0fb73bd06856141902
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 31.7MB
        • SHA256 f998fd1eba0d2224b40ecf328817840834507148862bb75e9c3c5564cf4560f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 31.7MB
        • SHA256 e225fe57ff4da8e8f10bf3eb9bfbf1d7f52cf667b581756844e7880325104a3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 31.9MB
        • SHA256 9f2a34dbe715c36dcb1d84203c192c5d31570ab3f3468305954108f8254ae953
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 32.0MB
        • SHA256 cc59beb077895242eb0e21d0277b293194cd0f878c11f0c334095b4383d4b9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 32.2MB
        • SHA256 e67b13f182e8cfa2e3a160b20d0a20864c2334a455c841413864794933b3d365
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 31.7MB
        • SHA256 cf357bc72d18579b872051062909b37085151ab40b2159b4865f8623cc6a3699
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 31.7MB
        • SHA256 ea0d0fe30440b93b1f4e2d12bca40b1fa7f15b22007402ecf2b8688265f7b147
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 31.7MB
        • SHA256 0e3de574b57df319b24fd852a1a81c21d0b1ca8424ab1678f5fbce644959163e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 31.7MB
        • SHA256 495bf59d305aed7c92217ffa7441fb4e27eb649c9f9fe1291e53c24071d10568
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 31.7MB
        • SHA256 b86b4998020f5ef51492495b9de5472c89933ca5f42c35bc260025cf2cf3b38e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 31.7MB
        • SHA256 6f6a935b0fab301b704b2f303575098a952584294b9381df04699b0536758bce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 31.7MB
        • SHA256 3f50241b6fde142a406abb8b4c73255994abf41177bab618a28f9680d8c9844f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 31.7MB
        • SHA256 d232fc66c88ef41b7e6b3f620a58d242743353056e0fb64194b7d32108d49c7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.7MB
        • SHA256 9db089dc35b56ad48fb015b37c7e11c8ad5696be00079258b702888c7608fc54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 31.7MB
        • SHA256 686e54d9e43f58cc6051cf36f32058cd3df337423c67323837dead3fdb409eb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 31.7MB
        • SHA256 abf2879f2abd52d46403135750167a94d2495211daa7faeef5ee33f63467e969
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 31.7MB
        • SHA256 854c1887b47baeed1c138343f5b027ecc3a3cc53bb3bf2d3f1fcf9c38b844044
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 15.9MB
        • SHA256 106de43318c1c977676cf727a7de2167523db0d19bc6a4229801fc3fb91cb077
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 31.7MB
        • SHA256 57c57abc26cb0db062d504cf538a91686d2ff2ca7e9864b4823e17b7ff14d26b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 31.7MB
        • SHA256 42acc649c408a27eac21b406ce505075c7ad4c192a5fdaa737968f4da9bf6833
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 31.7MB
        • SHA256 489cdb1980675c93e803ad51826adaa6813eddbe56f9cd1337cbb74f41b783c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 31.7MB
        • SHA256 b04e34efade9f87ec7facbe989a0a60fa0ba55e8e4c42343668264624b6f9228
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 31.7MB
        • SHA256 bd1ec1f0693db41f888eeacf10760d71b6a4ad4bc1dcb71a2b851ff90a2f6432
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 31.7MB
        • SHA256 dfd90f68c87a9a3f7a77bf10ff9c18d64e40f015ac0ee4d2e5bda749fed826b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 31.7MB
        • SHA256 c4a24e5e8dfc5b76ba53a6a8b58aad1d23d00c8d4f130861917cc64138281863
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 31.7MB
        • SHA256 88d72aec9ba9f4cce87f303393bd6b66019beeaeb35263be772597bc44c73905
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 31.7MB
        • SHA256 50b803282a5d50d5e3680896bb6bf48f69808726c1db0b51c4aa4341fdab7333
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 31.7MB
        • SHA256 b7441a3c2b68358c869e12c4e4742c4972841e7bced46fa93a6a7aea616125c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 31.7MB
        • SHA256 4100168c3a3e5c1f2f3f8e6b7cf9c4465dd4f01e5e1e6769625e510cfb79c32e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 31.7MB
        • SHA256 d4de00fa7ceec6a29a072aa5fe0016233aa6015b4021bdc16dde67e18ccc0267
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 31.7MB
        • SHA256 c3f222079c23c1d9b5bbb7c223374b96911185be5039fb870a7b1773ae2fb0c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 31.7MB
        • SHA256 8c78b9290dd97bd7be41b153a1a6fa75a1ba38ab77691a3274c868dfe2401f99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 31.7MB
        • SHA256 a3607313454725772e8d2dc5bf8a1f359bb26de19cfbc85bbbaf4d54c8bc257a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 31.9MB
        • SHA256 904a592547eb5009b9387646f4733a5e63f4f77692179eae844e6462183dc44d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 64KB
        • SHA256 561e710c0f12a9ecf3c544ad6eaf227983f3f3f2dcce0bb2f803afccc641ad14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 31.8MB
        • SHA256 7c8b84cdfef1b2b43811d76aa4bc11273cccd54e161d23a54f9068ad41c464e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download