Overview

overview

8

Static

static

3

2026-07-15...ed.exe

windows10-2004-x64

8

2026-07-15...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/07/2026, 04:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 16.5MB
  • Sample260715-e7gsvaew2y
  • SHA256 b59ae9199e8840e1fa8fcdb9a760f878653143cc3ab92ad5f49c413a7f576e98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1728
  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-15_9468f2cce1babf532d571b0ef660fce2_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:936

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 16.8MB
        • SHA256 3851f8438ca40c821190397bf08f67cbdb07ae249a21ba93805caaa2bd35b706
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 33.0MB
        • SHA256 2cd9c43969e828805ac250f0c9d98be09c6f89095982df4b2e2d355d4f837bd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 33.3MB
        • SHA256 ada067a8a174b69c74632e0df1dccc280acbf2e6d0e82fb921f357cddc9ea6fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 56.5MB
        • SHA256 e10d29f9fd5a00b741279ea4af83c5a12965db1dfdc96fb0a0c0563803b92492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 18.6MB
        • SHA256 d589457806c36ea41fa1460872f566cf82fae868b07c81e342c495ca9cafdf25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 33.1MB
        • SHA256 ba368f3437129d14dc8e16e9e43fe923e2fa143af002c6f84eb18e7c7ef80b38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 34.7MB
        • SHA256 243fa02b436334a4ec446dfea90827eac8976975a1d7ce6adb91dc239a95eed3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 35.3MB
        • SHA256 2b17047b8d0d820f29efa183ace399066e97ae312fe010887f23446164660ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 34.8MB
        • SHA256 366a2b73a67bc1761c6d082e6c358f2cf88d60d7846242e77ba194bb000aa5d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 36.1MB
        • SHA256 ac8a848807d6aa86393bf4dd9a37ba195657d92fa6bf2d517d85f9f54e5e6f7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 34.4MB
        • SHA256 927ab311c4cfebe4e55b838d1e1c58b4e687e9bd646f629e4cb5b4d031bb171d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 33.0MB
        • SHA256 7e6a3755f975db1c5a56ed0c3670e9141e3846063766f34a2362ee94437c1b94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.3MB
        • SHA256 78a3cd71e67da27a4e249b7e797e41746f3365d363d5168dbc73a6f2012cc69d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 128KB
        • SHA256 43487443e34438846ba103b7924eff4a32e10c362356ffe679e3f7f007a74316
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 33.1MB
        • SHA256 634fafe6102328b1f54ef0ec109befc37e280e57fd054cd4482601110956ff98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 33.0MB
        • SHA256 5a48d14c5978caea1be61f6e44de1111cb6a4edbd91106c44396b3eb50cf9801
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 33.0MB
        • SHA256 eb761694075fd4f7d2fd3c0ccd58f26a519a44a18195ae6197730a5c146afc86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.1MB
        • SHA256 2aae75dc08c43b8b7dd52e803c25c3a767fa9ba1fa0a709943b933ff542ca9fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.0MB
        • SHA256 d0953f1a7880bf0eeff92acca76011e694a4a0197b0d4800cc5b78933abfbd8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 33.0MB
        • SHA256 0f3b0d888f4268edcae3866df716370e6aee1f310b153f5e3d6ec9b026c6640a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 33.0MB
        • SHA256 8ae0486d8aa160537a56ddbc53a7ff99461a5f72809f77d63dab5277106e8183
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.0MB
        • SHA256 58bafa923b983f611cdbc911d9d91733e630cebf0e633f7f9c208ec143d2d3a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 33.0MB
        • SHA256 491c0e2f206db9536aab009d8caf145145c8990e3e0416f4557c69f4c3e5172b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 33.0MB
        • SHA256 9ff9843b1f059a88f3598cdac043607fe8e776db36b483497c30aab375db613a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 33.0MB
        • SHA256 963a18337112025dd2f071a5517e34a8d0d9884633c7b1fe2abe30dd59cfd44c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 33.0MB
        • SHA256 b017b26a3238f29533b51133e3afb84119d58c957e6d53c26f1eccd71222c885
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 33.0MB
        • SHA256 36b29fe258bb4691ab20aa7efb7ac63e64f32cbb63d9fd76a25c6fccb5ec5b9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 33.0MB
        • SHA256 495baf550f788af3a223a1703d8a682261f83514c36a287eafff29b2751e14e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 33.0MB
        • SHA256 ef87fc376a3e6f262ba180a1d78cfc675beca8f16291c25b42aeeabaf8dcace8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 33.0MB
        • SHA256 60b2dcc15f9c4398d9a59b80de571f2183624d2bc8ef5fd54fe00877f3d05304
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 33.0MB
        • SHA256 d6d4c9cc5e82bb416ed5ac133089e8593718263df29b833c6104f7134b3261b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 33.0MB
        • SHA256 a3e30ff77346f9702210505e7583f377641b59b06b8057c5bfe16169bbaf399f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 33.0MB
        • SHA256 aa2ff18b34fd7f66a38edc26e94be68ad8b87bfd457b0ae9d2ea31c62f863b6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 33.0MB
        • SHA256 07f5ab374fb33102137838cba31f1741d5612570ed2ff52be931d1158fb5dbf1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 33.0MB
        • SHA256 39189dafef4ae7ed2a55c2ab01d7f8b30f6bed75b29528d14f20a6fd5a3805e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 33.0MB
        • SHA256 8270cb27e7a0125f26d8e9f0ea23e1c58d8766f097e234e1a3cf4d4ad08ad683
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 33.0MB
        • SHA256 d5b1b04f9c9e17dc531537c416ce00fdc215497d91eb79cbac9d800c1719a8b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 33.0MB
        • SHA256 ba2f87713c643787be2e428dc535d3a34699f554b5d5cafa4754383fde8a37d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 33.0MB
        • SHA256 9c2449a144b1abe8e181bc61af2bbb2e0d20f85be52c001d284089dbcde34848
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 33.0MB
        • SHA256 d688f530e28be2f339452b612520efec20dbdcd7818e97da66992cc9c21abb96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 16.5MB
        • SHA256 fbc4dc87f72e8db444811b50f36fa7a349b39939292d8b9c4f0bb80c142cbf21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 33.0MB
        • SHA256 b68c10ff40617d409e5282f570ec6ec367454181feefa7bb3965b24fe723f806
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 33.0MB
        • SHA256 0bb3cb6365142ad1820d0fd48e3e639a57e5f26c4a7ade2affc271541dae7201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 33.0MB
        • SHA256 1da2d97e6ebac39880d88640dc0ce79e3a7cd5424d1f52dee0fe02c88f67d57c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 33.0MB
        • SHA256 8ad5fad320298c93abdf8036482ba287de5fef07e2c35e30ae4b7eec8a9e10f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 33.0MB
        • SHA256 cae1cc19df71c6e0ce0f8b27c396a26c27d211cd091ff439bbf2db4735485b03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 33.0MB
        • SHA256 72848e131f4160922f724a462f3191d20bc68aff7fccd0a8502ab231f7b7c54c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 33.2MB
        • SHA256 d1ae3f94ff408ee7333e59731434ae9c609345f4a6114be1039141f8d5bfe8d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 33.0MB
        • SHA256 a77236a413f0346e706cbe9be13f32bc338d15fec2536d8900a3573830241468
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 33.1MB
        • SHA256 658beae9c04b5d4d63244349d39db483930b0069cfe84b937999511ff1795100
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 33.1MB
        • SHA256 847d593c4b44f0480aee55a9c478172e09806f830547b6ae1382e3e856beda07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 33.1MB
        • SHA256 95785ed3c721fd065ee7f90d2960f6683c442837a621991b4b16735a3b262a6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download