Overview

overview

8

Static

static

3

2026-07-15...ed.exe

windows10-2004-x64

8

2026-07-15...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/07/2026, 04:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 16.5MB
  • Sample260715-e7gsvaew2y
  • SHA256 b59ae9199e8840e1fa8fcdb9a760f878653143cc3ab92ad5f49c413a7f576e98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4872
  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4028

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 17.2MB
        • SHA256 5571021be711d51362da317d8a9e0d0f186f30c3c14120370a2542f3f3d0fc2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 16.6MB
        • SHA256 477405c53a1496a4e24adabc725a8d5abc7aa7eec41f4d475f71ad4e4dd0aa71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExportCheckpoint.htm
        • Path C:\Program Files\ExportCheckpoint.htm
        • Size 33.6MB
        • SHA256 12b4b645813762087a315aebd140634a542eb40ed5bf5457db0f73b3d34eeb34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 39.0MB
        • SHA256 ee9be69aa3d778152870961daf0021750382a1baabd5dc563139ea2830d2d035
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 34.7MB
        • SHA256 243fa02b436334a4ec446dfea90827eac8976975a1d7ce6adb91dc239a95eed3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 36.5MB
        • SHA256 f75dbbd1ba09b2661c5007b07d998d80056d56645ff0851a071d4bf221e07618
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 35.3MB
        • SHA256 2b17047b8d0d820f29efa183ace399066e97ae312fe010887f23446164660ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 34.6MB
        • SHA256 55a3c25c705019d9ddb4dfc37fdf62cd8d002d18f4cccdc47d1c3019075e9108
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 34.8MB
        • SHA256 366a2b73a67bc1761c6d082e6c358f2cf88d60d7846242e77ba194bb000aa5d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 36.1MB
        • SHA256 ac8a848807d6aa86393bf4dd9a37ba195657d92fa6bf2d517d85f9f54e5e6f7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 33.0MB
        • SHA256 bbe9bf2b845e450e27fb3b3e69de59720581b663d5f08877abbcbee07cfb2b86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 33.0MB
        • SHA256 f6666ee20e192c03a05b0325b21df5624c7511bef2ae682bf26726f879376cfe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 33.0MB
        • SHA256 2ec1b83471cfc6da28d7ba8b202a6fc1a6047b534b71defaed1c2425308a8e7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 33.0MB
        • SHA256 1495d223a7d6d42d55b900b439fb930f6c22794baca2505ef6a8096365342cca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 33.0MB
        • SHA256 7e6a3755f975db1c5a56ed0c3670e9141e3846063766f34a2362ee94437c1b94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 33.0MB
        • SHA256 912d44a23be5b7e53de460c94689498466ba2f2210785643a46801f5bda797de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 33.0MB
        • SHA256 2234f5c08df529a05f9885fa51c5e637dceffe4e944775db61b1e5b4979685cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.3MB
        • SHA256 78a3cd71e67da27a4e249b7e797e41746f3365d363d5168dbc73a6f2012cc69d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 33.0MB
        • SHA256 dab0a525c08d8229237166b7c05e6f61a6fe0d15f763ee6f0bcaf4778026591d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 33.0MB
        • SHA256 e9b2242050e85c451b1d2f95efd7b6358c1664666f6cb81e9e887745e2230e5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 33.1MB
        • SHA256 634fafe6102328b1f54ef0ec109befc37e280e57fd054cd4482601110956ff98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 33.0MB
        • SHA256 5a48d14c5978caea1be61f6e44de1111cb6a4edbd91106c44396b3eb50cf9801
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 33.0MB
        • SHA256 eb761694075fd4f7d2fd3c0ccd58f26a519a44a18195ae6197730a5c146afc86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.1MB
        • SHA256 2aae75dc08c43b8b7dd52e803c25c3a767fa9ba1fa0a709943b933ff542ca9fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 33.3MB
        • SHA256 dc2c71260f9c33f2c8d0f24401309b9cd940fd7e049d4973cc76a8738630561f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 33.4MB
        • SHA256 e50c160433a48f0e5effa377aa247e2d96d029b1847b898887a6c4a07c1f64bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.0MB
        • SHA256 d0953f1a7880bf0eeff92acca76011e694a4a0197b0d4800cc5b78933abfbd8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 33.0MB
        • SHA256 0f3b0d888f4268edcae3866df716370e6aee1f310b153f5e3d6ec9b026c6640a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 33.0MB
        • SHA256 8ae0486d8aa160537a56ddbc53a7ff99461a5f72809f77d63dab5277106e8183
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.0MB
        • SHA256 58bafa923b983f611cdbc911d9d91733e630cebf0e633f7f9c208ec143d2d3a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 33.0MB
        • SHA256 491c0e2f206db9536aab009d8caf145145c8990e3e0416f4557c69f4c3e5172b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 33.0MB
        • SHA256 9ff9843b1f059a88f3598cdac043607fe8e776db36b483497c30aab375db613a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 33.0MB
        • SHA256 c0623d0b5494f329e61aa87b83067d8ea02c052ceae5511f564d6e8e73486810
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 33.0MB
        • SHA256 480bb4a6c53c5607580909d8d5144b9b2fee4e885b12d14636266ba48c8f0e58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 33.0MB
        • SHA256 b7c1f6101b4bba4a7dc54115f483cea688c967ff54086685c56bf18ae177b976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 32.8MB
        • SHA256 fa52659b9d106571ee64691e8c69777386fbfc22bd88001cde8f10db9d4e3713
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 32.9MB
        • SHA256 a4e130146d304ce6dff9b7b42278731a61c609e190cef295d9ba08ef8b7b019e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 32.8MB
        • SHA256 3b6c2c4aa38b494c598d92b2aab9545d179463c83dbcefc05324df59c9f5cb36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 32.8MB
        • SHA256 b9e9284384d15d240c2758d5276045a60dc3cc1cd1d5cfc9c2f012d6b306568b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 32.7MB
        • SHA256 20bf3a75cceb4d1372fdc1e1acd5397cbdfc274f59b868d1be29708b7e2b0765
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 32.6MB
        • SHA256 0e576cb4e890c0f6648aa478f0ef83452c4b96a7114aefda8e9ff2a6baaf9271
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 32.4MB
        • SHA256 9d31191a427ae98ace3a346c8a35c3e2910561ace715a4e5cba6716e93b2a65b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 32.5MB
        • SHA256 61b3ea75c876f7583bd84d8ab04baa6cacf14bc2aebf47fb27160dd9b43e026c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 32.6MB
        • SHA256 9ea0b57f82f6796daa41d24bc25f46bb6b35b4ad58dba576e9d33f1a0af7dfba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 33.0MB
        • SHA256 0bb3cb6365142ad1820d0fd48e3e639a57e5f26c4a7ade2affc271541dae7201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 32.3MB
        • SHA256 4b128b54f3582d57c4426901c933b004c959ac3dc7f27c73f5dd1787c2963675
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 32.2MB
        • SHA256 b4a86cb0b1ced5979e668875247cf5d99cfa030d7762d7d2b19aaf221e672684
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 3.1MB
        • SHA256 8286a3164029f69cdd0e895977ca6ba1ed21b9b66244f889a2baf4ab9dab2853
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 33.1MB
        • SHA256 658beae9c04b5d4d63244349d39db483930b0069cfe84b937999511ff1795100
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 33.0MB
        • SHA256 478ba647af2c05e9b8d24a5ec30162a81d2e3979ee7c8dbcbbde7afe2d296a32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 33.1MB
        • SHA256 847d593c4b44f0480aee55a9c478172e09806f830547b6ae1382e3e856beda07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 33.1MB
        • SHA256 95785ed3c721fd065ee7f90d2960f6683c442837a621991b4b16735a3b262a6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 16.5MB
        • SHA256 b59ae9199e8840e1fa8fcdb9a760f878653143cc3ab92ad5f49c413a7f576e98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download