Overview

overview

8

Static

static

3

2026-07-15...ed.exe

windows10-2004-x64

8

2026-07-15...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/07/2026, 02:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-15_5ca57af6472ae9639ad450f7ef23e7d0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 11.7MB
  • Sample260715-da8dvsc16z
  • SHA256 a89d3f1465fa7689edcc934f947260ddea600285fb6205c1e88c3e6584b21014
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_5ca57af6472ae9639ad450f7ef23e7d0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-15_5ca57af6472ae9639ad450f7ef23e7d0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5156
  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_5ca57af6472ae9639ad450f7ef23e7d0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-15_5ca57af6472ae9639ad450f7ef23e7d0_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:832

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 13.9MB
        • SHA256 ec29e261a96788298561e3762c99415b609a6030aceda509e2633144fa2aa66b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 14.0MB
        • SHA256 f121b51387d39e660d05783c6d82d0af69600bf9f0636a64b02b44925ef96a0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 13.4MB
        • SHA256 b1608acc5696c778f5a7aca6cfbe0b912292edc92639c63c5c7820ffe35d3c69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 13.6MB
        • SHA256 9a06111d26d9fdbd9b52b42b538e6ce6009edb6542f2917fa8b1a0eb9ca48417
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 14.8MB
        • SHA256 5ff8f2ec74d0f7c048b2a478189ff8ea22a9f7edf1f6a3ad8e4b12b2ad844659
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 13.2MB
        • SHA256 71d4194baa207ebae77613b6dcf5794353d593b63ffe6e2e82128792d8784855
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 11.7MB
        • SHA256 a89d3f1465fa7689edcc934f947260ddea600285fb6205c1e88c3e6584b21014
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 11.8MB
        • SHA256 0f94a4bdc5bfe18194c87aa0cd3b619978456cafa9566aad2bd90836070df7a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 23.5MB
        • SHA256 70602f29677563cedae2d031e9816870a17713eb830130735649107b69a885b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 23.8MB
        • SHA256 beedf620f79ae587620cea976d64ba0588c4eee824795a2f26349e52fd864d45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 23.5MB
        • SHA256 a8b839b8575db0543269865d7c47803dee2efb72b4246e404d2dc4bc05855179
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 23.5MB
        • SHA256 0cf0a6f92cc0eae6982e9ad62f6fb7e6d794c36c290a43da00021f803b17baa8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 23.6MB
        • SHA256 f65158d8a5ad462ec2cb02b7a79183c003bebc6bb104b37b0970215c4d18431e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 23.5MB
        • SHA256 9b48d147c19e14562a99b18656e4d09370b72ea89ee0fc5830ba86bfc12945f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 23.5MB
        • SHA256 9b44e05f924c82e3adf4dc3ac88174a3173951e767edf4253eec64f064a11e1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 23.6MB
        • SHA256 2c4865ce3b21da2f7a613eea8b66c9224f2cee05f5cbd2fef3d34151ee1fa625
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 23.8MB
        • SHA256 c4dcaedc2cb0548a49a667f111d4b7aff4912262b968ca73ec3d696e1f91ff3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 23.9MB
        • SHA256 1facc91fbe906feff2e8e19f26c86231447879868ff1ea332e760ea5ba959e41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 23.5MB
        • SHA256 cfda0145b5448eb2daee1fdb9a3fca45d07767d18b0540fc1ae6bc430474f0b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 23.5MB
        • SHA256 d71cee830c9b17ca0fa71337b0164b2b744c3ad004554f77cdba7a81e6011140
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 23.5MB
        • SHA256 25a8f1820baec580ef22d5e590051dc5ebac99b2a4a313aff17923272eb839bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 23.5MB
        • SHA256 af6f628c2a4dc69374e2c4be3dbd9b7513fb47e52f8064622d96ec6709e3c791
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 23.5MB
        • SHA256 aa0d7babf4af0ad6803b2bd0e01fad2a4dc65218394ac42776c42ea814831f13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 23.5MB
        • SHA256 948301a3e1891907f91bb90cbce2cb3a119165f2ce0484222799d2826042c86e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 23.5MB
        • SHA256 cbc7f5b7e60a07a1b47e11944ef02dc51c9d2f123f39f98710a4143ce9f770bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 128KB
        • SHA256 43487443e34438846ba103b7924eff4a32e10c362356ffe679e3f7f007a74316
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 23.5MB
        • SHA256 b59a89dac2918c99b5dcfd6ecf71c305030f11a332c96367737810b73e6ec18e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 23.5MB
        • SHA256 ccf0ccf503ccc030c02e48c8164159de81a6cd5c78de70cacbca79c8c23d244f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 23.5MB
        • SHA256 350199bce5efadad8d0ef10b161fbc12c215f19d71a9ff2d5be91dee5efab2f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 23.5MB
        • SHA256 97efedc9e47ab19b3a04f2def1097cb025d2eaa117e5db240914d3b98c6322a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 23.5MB
        • SHA256 25d1ef1cdb5018b829cd8d3c61ac9c3a30f4b19a8fe0b3e23587a27178a4ab46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 23.5MB
        • SHA256 25e06d1600e462dd407cb881009b68423a6c17217956647321feb7a77599abbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 23.5MB
        • SHA256 1d43869a1fdcef70feafa3159e0230aec0864925f253f96a16fe1e28ae7fabd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 23.5MB
        • SHA256 186aef477b6b28fa649d888961ec3631ec87c1890a1ea684f775c52cdf1cc6f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 23.5MB
        • SHA256 b58663245dbdef461b3cfd92a9199677e839e30f6dba4945c976c73d8cc6015c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 23.5MB
        • SHA256 90e77927720d4a0da03eb1edb0ce4b5eee36d1b5dc762b6546e009ba7ec72ace
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 23.5MB
        • SHA256 335c2c94d94696c588e6788379d497f9951f89c1b03ff65bd43f60a236d42c50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 23.5MB
        • SHA256 3b20e93f597cb8eacd6fe71853f5b8dc34d76bfc19d41b73ea5d37d45fbefea5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 23.5MB
        • SHA256 78f9e1ba925f65e1a497f5f7b105eaed578e4643ff378f76f1d300675badea61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 23.5MB
        • SHA256 70d62bcddc9fd89a34f818b1d8cab2a7d9f6f3699e3f74089b256195b66eb5b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 23.5MB
        • SHA256 8ef55caf1502450681a1a7a534ce972a581d4f671cfa212085890118224cdc3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 23.5MB
        • SHA256 761132d48479c8f371582e0416d13a7470e34cc08a07f8887e25e69ae6536aa7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 23.5MB
        • SHA256 6881d4c168f4b15054f6ae797b9ed9b55c276290eedca42fcb9d1e970f820cee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 23.5MB
        • SHA256 d2e32a7838fc4229019b02cc02eb459a872592f85768df4345abfe01ebb03a52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 23.5MB
        • SHA256 0d59302f0ae8d3fce5cc593cf01239ca1d4d15dc1d6bf323c8e9fa96f3ce436d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 23.5MB
        • SHA256 b0ec7ab1bc77ff142f6018ef3961b6c0854d8b87de7fa015af94c3e66c3b33bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 23.5MB
        • SHA256 0bc4439dba5db64021e403c929363b93e541db93c6542a6740be5c0dfc855a6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 23.7MB
        • SHA256 8589408d9571b0eb3c7b06d4c34c5c004e10a2ed0dd0d590fae66865dc8addd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 23.5MB
        • SHA256 bcd42e4e47d1839be1e62054eccf0d446b09bc40ca75e90bce3ca126075b82fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 23.5MB
        • SHA256 608d17de7158521de61598719bfca33e55122eae568e288d1acd2c6dedb9b5d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 23.5MB
        • SHA256 bbf955940a1a182fc216a49d4fba55d04e0bde76a17b4c09243af1750373a24d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 23.5MB
        • SHA256 c627e8ca46128365cdd103a8b0e18bb007d83800b5315dddb7d21fc7f10eca12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 23.5MB
        • SHA256 d730112ada94e3a6d18e927d349691c9d09bb69a812b21dfc3145dd41fa7b7bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 23.8MB
        • SHA256 dcd2bec306ee63c9ec3f762d8f1074f2b3cb9bef052bdf80d9b398df5a19a966
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 23.6MB
        • SHA256 167155d4275ddf5771b196e2e1ccbc434c1e1955892ffe61f07760161edc6dcf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 23.8MB
        • SHA256 08334feffbabe420e259d79e3db4dc71471d87a20b8a24c53ab35b0c4931efee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 23.9MB
        • SHA256 4a93f92694296027cd0727337b8b51b4f0634a38cd78454c5b2f328acf60ceaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 23.5MB
        • SHA256 4203d9e33e61fe98b823e844690e0b87406c378cd6bcf7dad5af7a1576983503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 23.6MB
        • SHA256 5be8947afd8bf77291b3c97541367b610cee08655a4c48095964705418526114
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 23.5MB
        • SHA256 eb111b054c9b1035b4b9cc3e0a6920329c3fc3636cd2a8f92e4025c4c7ce0844
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 23.5MB
        • SHA256 d5431726b7d2ceac4d17f6049c219a798a2f3b9ebfc04ad227954534fe82ba86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 23.5MB
        • SHA256 36ec65e9f3911775d46890529a7499f7153f3603cb8440eb0b4f5323da622960
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 23.5MB
        • SHA256 7d665c1776ae9834c436c3ca9cc07a206a9e8cc44e40350556999a6764432660
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download