Overview

overview

8

Static

static

3

2026-07-16...al.exe

windows10-2004-x64

8

2026-07-16...al.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    49s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    16/07/2026, 03:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
  • Size 15.6MB
  • Sample260716-eaa9sscv6p
  • SHA256 0633bb3ebbfcbb2f49d489baae7dba1d0e210d218bfa7584463621b2d79ade8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1804
  • C:\Users\Admin\AppData\Local\Temp\2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-16_6a2303a2ca27e76d9b94531d6b4429cf_cobalt-strike_elex_emotet_hijackloader_icedid_luca-steal.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4584

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 16.3MB
        • SHA256 b28618288db71845a7c3d3cc62fad8af48bb07f968c4211a624056af784d2098
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 21.7MB
        • SHA256 d2087a162c81a515e9ca456490a8ddf609d3f140e02ac9a78ffb10ec6210327f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 17.3MB
        • SHA256 0a868a303f5f3d485a10af5be7c3e96c3bb0a699a049d0406627e5c5b9c87917
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 17.5MB
        • SHA256 65b37705213fcf44632bc36bfa7a6caecce08be31d23f3737151ef9d3ea37d39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 29.2MB
        • SHA256 19f0858ebb577ab53e02375744cb675e764bec1f4c5eb851e3104a57c9c88547
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 31.3MB
        • SHA256 61e9cf81dbea2249485349349042ad4384e388e1430b8d00b0e6370e51e18ba1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 18.8MB
        • SHA256 5bbf4dbdd093a81f6fcd99a7697a51d5547868511ef810c8e436f10dc77f94af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 31.3MB
        • SHA256 d4ea724f2b9954f7bd3e04b36af6be08e8d4f278322d26c31c55a9112c274dee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 31.3MB
        • SHA256 b526fb6cb22316a5a0f4d1228bcdef5286eac3ae1b401bc2c90f2e7e679a2228
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 31.3MB
        • SHA256 19784e558f6e9c569c496c3cda7e42bb804cffe4fabd0f6543192107b0965f8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 31.5MB
        • SHA256 c08d2b1cfa3f8244e5f445b1b5620c00e1b5c9794ab06fbbb5b22ad43da64457
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 31.3MB
        • SHA256 796a28f2994251db4a42cea52a88641ccc217affa5d4c38d16afe7e4b51022c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 31.3MB
        • SHA256 226a552a110bfb2d9ac00c626e3a1b7bb89e12cbfd22421381dc8b33d32fa47d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 64KB
        • SHA256 561e710c0f12a9ecf3c544ad6eaf227983f3f3f2dcce0bb2f803afccc641ad14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 31.3MB
        • SHA256 d63e561008cae8d94f7008f25aac33216068260509cc7161e3b40ddf94ae2071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 31.3MB
        • SHA256 b9975057c5ecada1dc73e11f332285aa3a8fa6042a1ee5eb18ad41282f3e3f93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 31.4MB
        • SHA256 017a1bfc73ffdcc7e051e136fb43205e27e711bbc326e3738a9789aa4b4cc478
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 31.5MB
        • SHA256 6e28351915e3b7b74197ded5e053292fd6ec0c6f853e78859ad50c544e5a4fbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 31.7MB
        • SHA256 d5ea56eaa5bc808a6542480b8d3a63172dfa70743b7cd9a0e10564a5be95d354
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 30.8MB
        • SHA256 0074675ca9392e42fd047b4868f48a251d2bb456852a56026c93d408b0899ffd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 31.3MB
        • SHA256 e9c651a87426e80e2c0ad12886921f9623b1a311c77ecc67f7928ecd60a42ad6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 29.0MB
        • SHA256 6f1385d3189723710e5a045e2c164100cf2d8952304744a26e5e4cb5d9fca897
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 28.9MB
        • SHA256 c94bc68bac62ea121b7b12165310a37bed9efd222c994c39c0e1a99f8889448d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 29.4MB
        • SHA256 9615b1c2e51fade0354adbf7d0705f0c3cef84d5678cb63ff8adf1808a1cb58c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 29.5MB
        • SHA256 cb8e61f993d03c9b0692a52e157639f86cf35a62ba4adae82a7515d4bd604c72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 29.1MB
        • SHA256 68de8edcf3cab602c9f11b67d064b3e0a1a80c1bbc427be12e1135c0f418fa9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 29.8MB
        • SHA256 121d24d28cb4925a3f53672e08f6d70324af5cc87a50b071f7160a3d9a6941c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 29.1MB
        • SHA256 9dc6710b694b069f5f5a2e20116f142b1f0cbd6b272cdb197e0caf7781eed575
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 30.6MB
        • SHA256 00a48e338fd05a8eb99c8e87e11251a0b8573a0290f89372aa9d894e9bca9e5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 25.6MB
        • SHA256 7d35beb77ce8fa37df8c1489a0fa1270895b1f4a606372945ebb476a7bd0a6ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 26.9MB
        • SHA256 ac8ffe65e519780a876fe6f718f9fb1e3262a1f814609d5523a0a1a0dfb13520
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 29.5MB
        • SHA256 276f27eab08f285ccaf0a0f82657141b87c0a79c4e87647bbc3febd695730a84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 28.1MB
        • SHA256 a89823582850d0508dd9054fa5ffb3b9fc5eec417b39325855f79bd4f6cff3cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 28.0MB
        • SHA256 8c63b652b0dc950863ebeb27cc2e8bdd89d15c8f236272c012882f02e7e961d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.3MB
        • SHA256 45eadb642bde523ddb7ab8674bf34aef0263a4297abd7e83dfdb93de8316a62d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 27.6MB
        • SHA256 f0fdc3951f2edabdd8e3dcf52decea9c65d735b91f16f85e5f3f954eb221e177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 27.5MB
        • SHA256 2ce2fbc85e4e8a74c9faf58c65ceb0624d16c04308bbfe62aecedb8f118cf5ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 27.1MB
        • SHA256 b01a05da5a082847c344beb6e32a85df42e93aba6a306bbd442b717a74516aa3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 27.4MB
        • SHA256 799ac7ef931ab92d9625da2f936b6a9370825df77216e17665d6738fc53e84ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 27.4MB
        • SHA256 8dfea12ddae481d7e5c51fb1e801da12409b167e9d5e3447f7a66856f857ab05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 28.4MB
        • SHA256 ba0a4d81697ee53e632e5c8d68910d2ea815b233c54d1bee7b9a6e46fc26cfd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 30.4MB
        • SHA256 cb864c4171c734f60ef114d48c8b2478223f5744657b4a6153f8dd92ff385f0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 27.9MB
        • SHA256 051441716f0614b075d928147302a44c7e1644c8ba7faa13fd24b3ed70d13ad6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 27.7MB
        • SHA256 ce3a732e99a9f398f7e8cd470cae837098092d9a298a0fa0e08c2bcc165c5289
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 26.9MB
        • SHA256 768700121b03658056ffb6e6ea50aa6e3d929e1bc09f2af8c37bf5be06e7e2c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 27.6MB
        • SHA256 8804422874dd5b635cdf0e54bd471afd9b41c450a8477ab46664364b77d12f47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 27.2MB
        • SHA256 d5199ea9b03cffe160d28d1bc1a03603a9caf4f82d3358d8998b74e0ba66fa5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 15.6MB
        • SHA256 0633bb3ebbfcbb2f49d489baae7dba1d0e210d218bfa7584463621b2d79ade8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download