Overview

overview

8

Static

static

3

2026-07-19...ed.exe

windows10-2004-x64

8

2026-07-19...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    72s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/07/2026, 23:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-19_04a6b42dcad521a8087bc560b86bbe93_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 35.8MB
  • Sample260719-3s8vsagy2p
  • SHA256 aa7c64f69dd7a4fa37ae647929e1f1d752dcc8869852be6a3fd1ff4452661bd3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_04a6b42dcad521a8087bc560b86bbe93_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-19_04a6b42dcad521a8087bc560b86bbe93_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4352
  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_04a6b42dcad521a8087bc560b86bbe93_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-19_04a6b42dcad521a8087bc560b86bbe93_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:344

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 36.7MB
        • SHA256 c52587cde3905d711217388baab033f15c9ed521c4f119161708a5099f4ece77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 35.8MB
        • SHA256 5e644762c59b1dd17985bb51a19da92a5bd5642b40298355fc7fbd768d6b13d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 74.4MB
        • SHA256 63ad289414b858c86a2afddcae64b2e2468ae562a8d2e87fff4d9daa412746da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 66.4MB
        • SHA256 b55cbebe01230704a14025aedd1d5db412d3ce84b32a0e1b82abe7efbe395617
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 35.8MB
        • SHA256 aa7c64f69dd7a4fa37ae647929e1f1d752dcc8869852be6a3fd1ff4452661bd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 68.8MB
        • SHA256 7af214f30e015823834c89c4b40c9a2f46d5873fd0074fc4be8c8ad4be5f7be4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 69.3MB
        • SHA256 def7ac0c78cbe6372040cca859c20059c78d63e966a9ee49a6daf2befe5cdb86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 61.9MB
        • SHA256 4481e300d640129b3ba221e8dc6707a646d3f01e7c95ca436acf8e973b4e9c66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 56.8MB
        • SHA256 d04f0b177b9fafb29bce5f99031a1421ab89e7763780f45fe4cb7de16846dae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 58.9MB
        • SHA256 d1217c62e8a0d602ac69592dfb3e32ffb26e7ed1efecf0484147a286acfedf78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 59.3MB
        • SHA256 d664dcc11bcdcaf5fa714bdfad2cfeaa64eeb35824c9bacb3dc277cfffbbba63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 58.2MB
        • SHA256 f53b7b5da96f5096b947164ff5e7615ca73cec43d47178bed2fc5cc0cbc1762c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 57.5MB
        • SHA256 f3b9563852e55f301439b1b33cd71ab5808bd1dcc0594fb8940fd9ee8889074a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 56.4MB
        • SHA256 78e21e5e05299139ea76df0a8697b7812ecb3ba33f8f7a19f8f4962bb87a10a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 51.8MB
        • SHA256 45030bd78d2d2bc4f75b6257df6c99953166469d0d754cf316dcbed55e072a1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 48.8MB
        • SHA256 2c5c1925b23a330cfdf202056c26ba64fd27d0595110045e82fe8867c49957d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 49.8MB
        • SHA256 462f0d740af61bf474d088e43be04f4e88c4ee9638ce9c005ce07d85d1164ec3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 49.9MB
        • SHA256 d4832d11a872503aab5bdc4b255568320c2183e2fb01bd9e6886acb544c6b778
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 51.3MB
        • SHA256 1c515d3f909f138b648fb2306e1b725a6bed14e9913597b64e87ad5553988493
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 48.0MB
        • SHA256 b42862a456620fd357d7f9c418aeb2b213516bd8071723e351d2c1d95258a2de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 45.6MB
        • SHA256 f909a33dc0514e254d786b1c8a5b1dd4f30d492c068afabac6845cb0efdd457b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 44.2MB
        • SHA256 14f4756d7e6fbbc11f600c5b6afc751f01899d668cad6f9fcc4b81ce60108fd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 44.1MB
        • SHA256 3b9ea0757b01babbf299afca09eff6e1ca67d3cb4a906fb20db7a4527eeec166
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 43.0MB
        • SHA256 eaf95826e1e7d8799ffc434e892ca4190b41adc64b6167cab9df3582679a30db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 39.6MB
        • SHA256 40a01b66a94b93d08f7947a076970f030873b857046ce42ddaed65011842dd55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 39.2MB
        • SHA256 5c847d4e5816dbb40f8da1d60c70a3a95c5348eed39cde751b8b1c4fdee2eb63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 36.6MB
        • SHA256 ab9d496663624cd8af8ad6f8919ba95200fc458d8dc6803017e905deda801581
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 36.0MB
        • SHA256 ac6dda94cf6980adc62cd413fa30233783a6edeb17c0afac1c3eb6f1cba3b41b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 34.6MB
        • SHA256 189a5da48afb02f598e7a18fd48020fe9290487fe055c3a59c1a1400883cc0ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.5MB
        • SHA256 709b61886c3887a8c5e73c6887a385118d3bb330d0e5ca0c1a05ab7d0104f0c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 30.6MB
        • SHA256 8cf9690fb674db924a9753cfe5acb846cde05fde530b011b2fe543f0ddb21ebc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 29.9MB
        • SHA256 da3b2c66c722b59f50277196a37bff029e4160039dbd91d574047f8d1a5260d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 26.9MB
        • SHA256 26968727f3c8ab30238d7bfe6f3c65aa8c04490a6c76b7d72475225c76413e3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 26.1MB
        • SHA256 73aeb597613cc2b50aa38cf7e586f45b34c906637b037af4a064dafe23f4d146
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 25.8MB
        • SHA256 fdb028a809891e8e47b9c1ec81945be68004c24cac3756c302fa78ea47ef147f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 24.9MB
        • SHA256 d293c27f2dd0bdf62cecb11cae5aa4e40e7dc902f543e3346f6124cb4338d364
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 24.2MB
        • SHA256 f8663a02b6387f10d581c161f25475c10a887df25bafd24a02b4ce3a5830ae45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 23.2MB
        • SHA256 5c53bd2e66846249bda065f265100325c09819327b0802d7510ebbe1bbf44366
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 22.6MB
        • SHA256 08237da1fcde0143a790e43622f2a233c6f837f28933a96c553862bbfefc1d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 22.1MB
        • SHA256 b948fd121617139bbf147a77638db5cf0545721f6c2b2d32bcedf38e9973ca46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 21.8MB
        • SHA256 58bbf5f5fbcbc5c9e52d7b5e638eca58e8b2ca5a8466732493145b124ae0dd58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 20.8MB
        • SHA256 1d9dd4e2fe56096fdc5fa02eb212a3024af2d90607c771aed3fdadffb6fed282
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 20.7MB
        • SHA256 f9188b7d0efecada17434c5328298435fc8165e1b28f1ab0b2180f0c78c35a39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 19.9MB
        • SHA256 233f1a47e2e67ab50a346a19b3ec6924aa151dd8fab8b5b8c4226cec466b716d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 19.4MB
        • SHA256 30a8224e9bc833ff29537a8bfc03c8406c0686a382f22586fa0e2e58151b0f9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 18.9MB
        • SHA256 e54fc460a786d2eab960b9352f40a9dd33d00f6cbcbfec0dd66b68296c4d7660
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 17.8MB
        • SHA256 91cad4d326abe79b54798e29f26e3cba640ce9f7bf83a15a07fba785d3c7cbab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 17.1MB
        • SHA256 4b4d2ebaae6f967d146ba739c42df943b76332624ef4b17a80bdc94905099a0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 16.8MB
        • SHA256 ba7dd08eb152c52cd84c5c73bf8fce7a6a942116b02453224212892094237c93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download