Overview

overview

8

Static

static

3

2026-07-14...ed.exe

windows10-2004-x64

8

2026-07-14...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/07/2026, 18:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 15.8MB
  • Sample260714-xae7vsdz5v
  • SHA256 c5ab8dd5acdb35a4e65ef98dd23031dc48a399cdcead2e35ba08bec51d5c3de9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3216
  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1080

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 32.2MB
        • SHA256 2cd0bb681db3cb1addfe99a728a8b3ce39e99ac797d18432d135ccfc74a3b32d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 32.6MB
        • SHA256 b7402cee2d6e299820fc3394cf963fa87970fce1376970a3b154cf12cd50d77c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 32.3MB
        • SHA256 2f5f95a9d88e40678552f79518296697f8459bd1f9317b8c9089d34753bb297a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 16.5MB
        • SHA256 b59ae9199e8840e1fa8fcdb9a760f878653143cc3ab92ad5f49c413a7f576e98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 31.7MB
        • SHA256 a77830d1fdeabd80fde8196f90016d7972e4e597e8781589abbc772fe853266c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 31.9MB
        • SHA256 1b90509410e7ddf243dc1f11316161656628fc04e209eea04c9944d330e457fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 31.7MB
        • SHA256 8cc44ac54a41849d044e89e83bf7ca9d0addba2cffb89b050f93826cae6279b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 35.7MB
        • SHA256 f73220effbe1c3ec6a22ceda3137c77a8b15ff081da59fa83cf6ba9dd75c4dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 32.0MB
        • SHA256 ec7bc78584d98d8964916fd67f2e085fa293162955999ba012be49466d143a41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 55.1MB
        • SHA256 0f2e0349a048e53fda516c78d4ab7b0e0d9e86daa264771ca312e71b54637212
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 33.8MB
        • SHA256 dd3fad726465e9eeb16005f13a0367c619564ada70c36f0c17a25f6b656f48e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 31.7MB
        • SHA256 e0477295021e3d68e044b8325266d91f0d2aa474efbd7fdec98c9af74950a8fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExpandRename.asp
        • Path C:\Program Files\ExpandRename.asp
        • Size 31.9MB
        • SHA256 2c667ce6b589bdac1a79b70d0b0e7b6fe6ef90a765fc0630fedf53a68c9154cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 37.7MB
        • SHA256 9d603c0e69519c41021216d98ea548a856984ae4a647511cb86c9aa465e38b8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 33.4MB
        • SHA256 b2c787e9af2318fd271eb7912faf08d14264d0fefcf567d5a919d6c8e6eafe7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 320KB
        • SHA256 363d8bcebbc5b12363d0170b74c75e244be34429994cda946f54b9498c281b27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 33.9MB
        • SHA256 217811347ff942273f7f96a52b0da907d048c1e37907093ff0077ee06157ae60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 33.3MB
        • SHA256 fa59f81b93b9c12e695baddf5622210b846695938a49e235f5e9230d8739c879
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 33.5MB
        • SHA256 cd82e0f987ef1a9bc9e00533af4de9303894a5733749df15d2a7d8df1bf27684
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 34.7MB
        • SHA256 64e662f7badc0763e5e7c1bd96a83621cd2fbcb9fd07b058dde798be7038e7b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 33.1MB
        • SHA256 2c7814b98a9abaccdadba1d45feea61a0aec5ebcd6743a3d9d2738689ddbadb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 31.7MB
        • SHA256 ef72bc5b617e0dcaac3a9994bfd5491dc95343a685c6329d1e489657610b9e13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 31.7MB
        • SHA256 ef5b3f54258548ea43d33edd5cd7ac805c7d746754f92538b826a56467982023
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 31.7MB
        • SHA256 81ce1a83e25a5c45125c9056f4d327bfc36c5133b3e77bdd5c73d1483383e212
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 31.7MB
        • SHA256 4d6d9420ce6c4696dc1f69866c421ba2d7e94c98509d3d4a3975c99e5a14e5d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 31.7MB
        • SHA256 9f550f19fe342f2708668bb8344054a1d5f4dc47b21f4b5b4e26ae02d789b142
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 31.9MB
        • SHA256 83168f22903e6268fd2ae0aef98a469f8f958170d07310eba84b72045cd9bc9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 31.7MB
        • SHA256 81da1d50043c366d57d1c5dc07430432de239a40ffb3c04010d7f4065ddbca1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 31.7MB
        • SHA256 5caf598423451ef28a89e2910922e439ff06a01948ba5ac3996f9e022244320e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 31.8MB
        • SHA256 7c8bbfd928f58717a73af3b8f0b1ea8b5d40e16b777a9b006e2a372002e66c65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 31.7MB
        • SHA256 7b99556c4199c998b0993d6784d62b0f26fa9ee1b0ddd35c70d83afc002b8c84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 31.7MB
        • SHA256 4230f311a9801a35c6bd0068e89d33adbbf856967b28dde04a26592e5820edb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 31.8MB
        • SHA256 4a2d73d30342c6b7edfa1b4833e58c5de234a0f49245890249fedaa46c898ada
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 31.9MB
        • SHA256 002294d73993bd5ff27a206955cebc85ede7d6aae4de1e1068176f21029341b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 32.1MB
        • SHA256 0f2c6e8efee257e3530982624ec2d14b28da9f3aa6c2e5ce746e4bde30580dc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 31.7MB
        • SHA256 df3da4296ebbace22ba1757beaa6daad0456b9de8b679f822a608001a1cbe587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 31.7MB
        • SHA256 34bd06f90e7e0e48df2e4b30c9ee2818687aa582c5b21e2c13aba8661f2d667d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 31.7MB
        • SHA256 5691d2c99b6a735860f7695492f55db44efbfcccc635786952d9898cda51a345
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 31.7MB
        • SHA256 36dea5c2c6ae12cb9b7412704d90e88aacc83684247e601e052726f8feeeae58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 31.7MB
        • SHA256 04bfa9b85dabbe06c0a193a8c4d693836871408fd0e4a3105841a6fa8e456a54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 31.7MB
        • SHA256 21ae9ec76a2a257c07eb73058ce4fd1ef877e4527323147909698edf32a46fbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 31.7MB
        • SHA256 fba3979265531c147f55e76980081eb409d8eb84ce49ae4e3d204521b82c61c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 31.7MB
        • SHA256 7050db2f8d4b8f5593af5a475527ae3278d29243850164888124dc9d9695f05b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.7MB
        • SHA256 1a46d399259b98a97282f3c4536fe4c6b76f98e91aa29f95e5b25c81b0da2e54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 31.7MB
        • SHA256 60374f992a32f6e139514c6797b2a9c6d58910b1ec86a6808940adb68fea8261
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 31.7MB
        • SHA256 dc606d96e78c1bd069ef607bb3451a29af09d7558620dc652e01fd55088cd708
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 31.7MB
        • SHA256 0403f28d7d582bc7da8fdc36740fb44eb69194a37e9f3c46dfde39888adef871
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 31.7MB
        • SHA256 23de3725d7d1e5f43e8ecccd50bd5954d8c6f95d9ae25be78abff7194169b6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 31.7MB
        • SHA256 c904ba59a855e0cbb305440481b15686cb8b85e55b4d7eaaf652b96daa599c4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 31.7MB
        • SHA256 c823ac9b83b0ed37f411b41fc65bc15e711a8c3e0ec29ff35a9796f67c0809da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 31.7MB
        • SHA256 687603e33ee8ef4714cf28211a82a207a4665c6df419954d6ebc970bc32b2173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 31.7MB
        • SHA256 fa9479324de14e1ee217fb5733ce35b45d11fee032f0951a193fc5b49212715d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 31.7MB
        • SHA256 69870eaaad3b56af4b9ec14b3969af22e7bcaec3e8f2137c22ef9096ab961829
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 31.7MB
        • SHA256 81ecc132fcaf7763d8894d0fdfb0f16608371eaad31a701b7d4c2aa6ec50ef00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 31.7MB
        • SHA256 53e92e95492b5b309e51b5be9e2ac3cd68e856f6eb2a23c68c5f1b8ca5aaef3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 31.8MB
        • SHA256 b2e6ada75e1ca81d97628f3988267ce04d0641118ccb999ce247b070ffc08678
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 31.7MB
        • SHA256 dbd828bfcd72e9a88280d2fad6785d0534d5ece81c75db47b17b37e799fa6270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 31.7MB
        • SHA256 bbe3fb360429e0d9fbc3be833ebd40549cff2f5bed26f56899a9292d5f41d8a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 31.7MB
        • SHA256 94d9b3b3e25fb67936d6cb8514273336aa815b97d647066dae34b38831d1d8f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 15.8MB
        • SHA256 c5ab8dd5acdb35a4e65ef98dd23031dc48a399cdcead2e35ba08bec51d5c3de9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download