Overview

overview

8

Static

static

3

2026-07-19...d_.exe

windows10-2004-x64

8

2026-07-19...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    47s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/07/2026, 01:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-19_7d6c158c843d717ce845ab34f1c8fc11_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 48.0MB
  • Sample260720-bjvs1sa13q
  • SHA256 7852625c2fb86a059392f405a18b3e4aff456231955aedca33195f1de9a7e71e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_7d6c158c843d717ce845ab34f1c8fc11_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-19_7d6c158c843d717ce845ab34f1c8fc11_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3284
  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_7d6c158c843d717ce845ab34f1c8fc11_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-19_7d6c158c843d717ce845ab34f1c8fc11_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BlockLimit.asp
        • Path C:\Program Files\BlockLimit.asp
        • Size 48.7MB
        • SHA256 ac480f376ade7824c6175bd3fe4c72950cab82d59456fe920afe8f8aa470abe6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 90.4MB
        • SHA256 c5b5732d98f724bf634e6862dd20b31b4bd6939d8d02e4c83628d6de0f048a02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 86.9MB
        • SHA256 f1285fddd4311d18d501af50c174813be5ffb6c258e214e86a1d889b7c780eb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 83.6MB
        • SHA256 a260b10383c5d1164c9e96381a277c7318ebd411e7bbfbcb574e342339661d23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 50.2MB
        • SHA256 a42efcf87d6dc079973ea58feb16141431fcc71972fdaa2a08c6595a0f5a7e52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 77.2MB
        • SHA256 e4733a80bf19c6d0ff7b062e4eea11e423d08dd12f9741b4d018546f646954e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 69.9MB
        • SHA256 c9520ae776d0b3a92a34045fcc55930405f2c8fd10cd113919e762d9c0f5eae3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 59.3MB
        • SHA256 2a93ebd7991c44c0b45a8e46811c7fab0a47f63a7f7f5538b4e96d5797cefd78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 56.4MB
        • SHA256 b36f965ff6d8b625bf31abafb4fbfa8fc29b7087a30db6f07010ad93a70f4085
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 52.4MB
        • SHA256 a378952f8c32a7faaa173e90687aa3f48aff3be2e24499b348d87415763b8c53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 48.2MB
        • SHA256 7ebebd29e844185d36bd434d3e10fa49705074d56d4658347656c4b4032cbf05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 45.7MB
        • SHA256 ae6825bcfa638580c63dd9a893e6e1e4110cc454526b19c9931fc24c9f26a270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 43.6MB
        • SHA256 f22830d0b5327d768b7f4e76f29cd6fff1cba35c3b89fe5326151048dc6177e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 41.5MB
        • SHA256 43adebb91eefa7015a62526277ef71c1a22ecaeebb660aaba78d1e08a715479d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 39.5MB
        • SHA256 c5dff9b12da064f8193f7ec0418e5a6c30ede940cefb40d0ff6da445abd1a74e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 37.4MB
        • SHA256 35cffe2e2b5ad864eef30655be9da132135b6c9b80c94e724b45bf15cc876dda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 36.5MB
        • SHA256 866fe382fdfdc49e5878429c9a200b226fec5d0640baf159adf00c07847b88ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 36.8MB
        • SHA256 7e177fbbe4bc36ccd1b3f414acb1865ab63383d8d37390d52ff7c16057e38ed1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 35.5MB
        • SHA256 e3f188c1e2437b018c49f6f701e0a4c5da02ba86b0d7d72473e344862b8fbafb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 35.1MB
        • SHA256 2cf3984fb7cd904188fcd4ecb71a6c12f5a1bc4c6612506834fb71a8fe3f0dc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 33.8MB
        • SHA256 888ca445a02e3b1ea88c0873f82d290ef84bdf727d7667e286fb921613de6e4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 30.4MB
        • SHA256 a29ab77488a1730c11defd90ae1bd10b8ed119cca7fbe6d8f419d769340c77b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 31.2MB
        • SHA256 f4b9a5b80082e603bc14abbace6d4e555baf394fa5277c9e0974efd439c845cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 896KB
        • SHA256 8eeb97b640af332d62476e61bc49f32f16ee0dfa34fe4d7cec160e4ca990048e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 28.2MB
        • SHA256 8610b6cffbf3fb181049c3ee472c873d223f62a80824398d511885cf5a336ca3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 27.7MB
        • SHA256 3daae44c7d13a9fba9cffffea1b919bf7d94bd602a6e9cc01f9ed4a50ae67313
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 27.4MB
        • SHA256 4798c737a356c1eb51713c1ab2ba17670a38c8e7247f75fc4a4d1926c057f586
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 26.8MB
        • SHA256 dcd06586a19dac6ca6e6db46efb9f4b5b934c8cb0d46c6ff1e4214f2a7c37eb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 26.2MB
        • SHA256 4e56f8308fa4ea4b447c04df6c8d60ff5ac4898fb959240523fb5ea372bdbd6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 25.7MB
        • SHA256 583b9e0349a9a2cdd0d43171257c6fcf4fbe390637f65f27596cacecf8e8b4c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 25.4MB
        • SHA256 25ec9394cee255c98debd617dd9907746da47a028984ccdf51db72c839bc681f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 24.2MB
        • SHA256 2aa1cb166a6c01e8232c93f51178e1ccb9b966f3ebffa4ccbca64e5e62d69acc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 23.5MB
        • SHA256 7eefd991f48d797e77561b808a5a253982fd580afe183423c2b59c136d4ce240
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 64KB
        • SHA256 d2eb08ebe0c7e7ff2223b6feb8c95f679251883e0b850d913bfa4b604432b861
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 75.4MB
        • SHA256 4ac192346f85f28fba42d8f8950e8614cb596bfaf5df50b215a2294d01a0f883
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 71.9MB
        • SHA256 faf37b6766123ba5487ffb8643d3c9f38e1c6f8d3eed06aaaf9b826398e8e400
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 72.1MB
        • SHA256 c2f09cce68f5176c37a10c949840257cfd29a1bbe3f7b1e4b7e8eb47694ad201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 71.2MB
        • SHA256 c4f8ddfb74a6291a879350de93cdf050853c12329f980c7e38f6ce557470ca85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2968-3-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3284-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3284-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download