Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 16:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_606740b02fdd63820b214e3feef62e71_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 15.3MB
  • Sample260714-vgnfpsby5s
  • SHA256 b8817840ba2a9b7c454bfe9df3b03e16dcbbdc6ee25ffb8bd54000b2b707d479
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_606740b02fdd63820b214e3feef62e71_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_606740b02fdd63820b214e3feef62e71_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:6080
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_606740b02fdd63820b214e3feef62e71_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_606740b02fdd63820b214e3feef62e71_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4160

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 15.9MB
        • SHA256 7d37f1448759ea74ed1a0a2e4a885a1183f9a08e5421f15d8cf949bb0cf6cbe3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 16.3MB
        • SHA256 4901f9053dc87052dfbec9f55156b10f5f4dcca541a8aca7b291dda4f1e03e44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 16.0MB
        • SHA256 f4ceede92ef877ab38004f1b047a086b6bd48d576ffa07b7c0a0108e03ab093d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 30.7MB
        • SHA256 2fd93fbcc1a1cdbf9104362cc4c52b8425071111629f398869476121c99714b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 15.6MB
        • SHA256 c28cf4edd69fc297ba081ef2f1296e7af264ccab7418bc3f5d7d339f468d0691
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 15.4MB
        • SHA256 02306304e46f48fad2abd1e8e199ebbc86381851311ce0e2e1ccbc4e393ab6d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 34.8MB
        • SHA256 8ea3dc1fd63c5332a3c7c7b99248e007934713edda44c86e2afa7cffe352e4b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 31.0MB
        • SHA256 80f3a2924977d64e9969418e1d0603f9517d31add0dad126d433fad38e6da6f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 54.2MB
        • SHA256 e2e296810241cdbe8d6e423428375594ec59e0b5d0bf989732c2e5fe4814e758
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 30.8MB
        • SHA256 74b83bd7279ccbaf2919779f5fbd5a33a4574a20a3a648413dd9997f6cb133c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 448KB
        • SHA256 0b68170553edf3185b314e238395ed1eef14893f0c425d6106982546c0eaaf45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 36.7MB
        • SHA256 dcb6a4a1fccf4ce8cb1f4b9c9ff808239123d54d352ce539b1c7db5fc11cad2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 34.1MB
        • SHA256 a8889cf7323be4e822b99d4814526e09369c7bbcd3b61315b0715df081ee538f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 33.0MB
        • SHA256 dd07344a566af9ce92ac06882d69ce47cc6e6b03c47004ecf4f39da7aeaa2d94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 32.5MB
        • SHA256 dd7af8b06cb7dced720c0fb44fe60f7068fda25039d57c763c6caf7f25583395
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 33.8MB
        • SHA256 27b862c140ea10284a3dd24712a047e5c8e1e05cd97827715e6d3a15888b1c7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 32.1MB
        • SHA256 d727ed3994b899950bd4cce23705b8b891c38778a1440253b24b95420f06e299
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 30.7MB
        • SHA256 25c26c9d37716397337e92cf866d381de580e6c55fbb2e5ad0cc0eb436daf80d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 30.7MB
        • SHA256 7bd7a27080cbc1bd335b6b5b03c39fd6811c1fc43579643bfbe24fb3213eeff9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 30.7MB
        • SHA256 a66f7f1e9b53cce169d9cf39ea72778a416bc2be938bdbe8c9fc70a396582ae1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 30.7MB
        • SHA256 8303951e935e44e509e57da6ea0a8c8b68bc4114a38da4229f1808cfb22d5aba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 30.7MB
        • SHA256 1ba4fdf4784c0c204da8b274212eff85bd4227224adb925e4888c604c61ef903
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 30.7MB
        • SHA256 1e67d9951eca9c92fdb96d8d8f168c22143a8e3d5c74894650d3f8e5eaef0757
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 30.7MB
        • SHA256 98d0c14f40e0b9301c1e58fee8a3b9a5fd5b0979747662630dbb5ff631e500b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 31.0MB
        • SHA256 462c3d6bb9c623b971eaada795783522a4b7dda655b562609292f717404df9ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 30.7MB
        • SHA256 eec0093124ae449934ff7ab60ec11b6122c7d1c2a0588051023a9a3ddad71efa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 30.8MB
        • SHA256 85fdf2b150131a51b53ce7f6f5865cfb572885fccac3859bc45e024fa3fb5622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 30.7MB
        • SHA256 84a43c832cb00070297c25fc521bd8cfe2bfa3156cc948b203834af8b38173aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 30.7MB
        • SHA256 c0115de0827ee6c11baea17e1d1e2f8a30334a6ef46d45819a689d1d0e5205f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 30.8MB
        • SHA256 497d72bc861b56d8d1478cc4882394021e035138a21791664c4d1605198eaf7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 31.0MB
        • SHA256 89d5158b44417947c16cfadc28ca44fbdfc94b38b81be446d0be25ee90a97376
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 31.1MB
        • SHA256 07f82790a2ecc1af33133db5702962c14cb3e3bb252417cee8085a1cd25d6e54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 30.7MB
        • SHA256 b251c2f33e5d510176420c3a88bde75baf4696d8dee312dc0451e47b36e0009a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 30.7MB
        • SHA256 ada9a031e00402c623dc6168e60c13242ad586e128c7df6af3db5363937205fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 30.7MB
        • SHA256 c32a5130bb800490a2a753768fb382c609b748b87fd9b868585cc3d66fea79b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 30.7MB
        • SHA256 52b2c19032df4abc60003a35ad06c0a0b38f9d9ee9aa3a26eb454cb5bf94a57a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 30.7MB
        • SHA256 6b64e74892be9c28d52c70885bd9a80c319501c8b5a41dfe597655ad8c51b40d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 30.7MB
        • SHA256 f790a142943f2226be616ff4382a29411b1a20c2f9a4aaecf8bdd5677312a512
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 30.7MB
        • SHA256 53ec19546d0ef16632e15c33a304693371cfbe18119d335a83b8981efb145c88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 30.7MB
        • SHA256 36acee1e8df60401356bf7363cc3315fb0950763a9e6c6e7e9483469bcc9e582
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 30.7MB
        • SHA256 9f7c40036fdddde944be0c4c9d956dc7a6c5b64823fb2a9f76c7a9b13e021b76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 30.7MB
        • SHA256 839b1090e246e550ce87591f870da1bdeb0108e7bc1502c69b043ccb26c725de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 30.7MB
        • SHA256 a4a7514f2fc728d002d88ed0e4f43f9ae1f4fdb20916be9ff46a7fc95fa772f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 30.7MB
        • SHA256 0b1a0ad9f3f7b8efad696c8319224147e69f9b9ae8622797d9a16f75eee2b750
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 30.7MB
        • SHA256 95112ba1e90a0e11d0d86c3b95e065eb1ad2efd8bdaae485ec49bcf61fd3c33c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 30.7MB
        • SHA256 c92e72a27e84e354d0e3e7b4384990634252629ac7625e929ad0ad6a69b09181
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 30.7MB
        • SHA256 1bc537b7915d02aea57f612170c081492f235630e6eaf151e8a4bfdbf08c8a73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 30.7MB
        • SHA256 2e6b7d5073277b81701af92f664f8a07676c9c80c8d738e170d58bacef293957
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 30.7MB
        • SHA256 554534d21db63fca7c40f170a8a000d0c5072c7ded1db70028cc5a3bb3fc9dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 30.7MB
        • SHA256 3f4f9f9df69def4d2569fca9e2608fe0973a794db736a8f9da6287bd07d4485f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 30.7MB
        • SHA256 be04dcac8ae9b638768ae9f16957758e1a4b88be33ce74b67f0e14af457c714a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 30.7MB
        • SHA256 940aaae4ab7d592fd9009e1d58c4b9605a87a45335dc82a34862c3b931911587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 30.7MB
        • SHA256 ddcc6614c859a3545c1cb6fd638edf224ca5e47a6535d724cb76eedbbfb0a7a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 30.7MB
        • SHA256 91cc343fc3f712427740fb932ec166543e19244925b4ab3d2cb1ed75c380e509
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 30.7MB
        • SHA256 91b53e77342bb7bd5d0416ac7073d55a661357908f7a00ebae0d8992ca139b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 30.7MB
        • SHA256 a049f31b0b233806c2e03b4ed9f7b3b46baf6f0a54f6343a5a5da6cba176688f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 30.7MB
        • SHA256 4d75b5c57269c14e3bff1028c35bd0aa05399ce5f6a01134ce004d525d60d834
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 30.7MB
        • SHA256 0a1efa72b64521e848667af57a80111a8e3d49c990312b4fbd9b5f1b941303c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 30.8MB
        • SHA256 1c443c6d4779e511bd59a9c6fa5b4dd8c058eaec52bcb3a9302f52bea0af386e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 30.7MB
        • SHA256 840d0b36158762ec6b4acef429e400e83562241dabece52b71a44b7873912f07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 30.8MB
        • SHA256 ad8444b73db7b31a8080939e50406d307450e0ffa4203b50f343cbc3e57b5ee5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download