Overview

overview

8

Static

static

3

2026-07-21...uc.exe

windows10-2004-x64

8

2026-07-21...uc.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    81s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    21/07/2026, 04:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-21_8446365be1f9603ea03822fc9186bd11_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
  • Size 25.9MB
  • Sample260721-ely51aet8l
  • SHA256 ed5da33345cf1899404de188a2c3e85b2cf786c939975a17dad7414152621470
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-21_8446365be1f9603ea03822fc9186bd11_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-21_8446365be1f9603ea03822fc9186bd11_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2852
  • C:\Users\Admin\AppData\Local\Temp\2026-07-21_8446365be1f9603ea03822fc9186bd11_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-21_8446365be1f9603ea03822fc9186bd11_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1488

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 26.5MB
        • SHA256 c2c6c0afe2771bc08f7f6f2a1ce1b07ebb35e3e2ccac8483287da1d1b00f05ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 57.8MB
        • SHA256 9e51cc8221c0fb9f92b79c7dfecf7f201e9f7d6bc3127ddaccf7020b8b8ed745
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 53.4MB
        • SHA256 b74a2308814e338beb9c938858563c9b45003ee4f705e9b4a6ddbab4cec69f5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 55.2MB
        • SHA256 720436966a93f42d368265823c4b7fb86901b723176a22dc56203bdbe54bd32d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 54.0MB
        • SHA256 3c19cea8bbfdf15efded005d372d226fee0cfae04cd919651c3dc0f26294aae7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 53.3MB
        • SHA256 65e03a8b8d1b2505049c6da8279bce49c30be524aa0f344f864fea206e4936bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 53.6MB
        • SHA256 57ca7caf52b04593871201de2ca0849f2d9e4c4d36ded7a421656c579270b010
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 54.8MB
        • SHA256 2abeed19a5dd2999fecdfc2fc042c09665c2af953e66c3b1fd53b6852c8dbb16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 53.1MB
        • SHA256 8b77b58b892e8455f3966ee45051f3b840542abab4b75c071a56a5b56a903bbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 51.7MB
        • SHA256 561cb741af04b951bfadc403fa0fbc964291512199d5cccca2ca479a4e4c98bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 25.9MB
        • SHA256 4ed2de5c3ce10051b5875daa198698d2bd3ee95d8320373b3a80b08fee14161e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 51.7MB
        • SHA256 60768316f23a28d4be35833d6da22a06768bf4ce021299f7ff5c20ae11c4c70b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 51.8MB
        • SHA256 695ae44ec5c6cbccdcb86699bf39982e4859312e11e45f3d350f8d5c66856d6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 51.7MB
        • SHA256 12ae6e8210599856f2e43bd3f6f4586112c95b8a31512e7ebc70ae28e8821312
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 51.7MB
        • SHA256 cdf264f67e11d918eb9e502dce8eabed19a42c18b0a42805d26aba7c27be3b2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 52.0MB
        • SHA256 ae81aac19f2e59964712b6f0ca78a919309ee0ae4446d09f6fcd6add88996863
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 50.4MB
        • SHA256 caa2f08eadf37877b8ecfe56a9eca09d8d507d5c549eecb2661b1344a8a1a6b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 43.2MB
        • SHA256 b6fdbca4112d5c6d537cd6c8bdefc1a18d640072de501fb48bd29a26e9501c08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 37.2MB
        • SHA256 0ea5401d8eb5b438efa83f5c62db77d80ee212515fbc6cd4191e87ccf737e484
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 36.5MB
        • SHA256 a7b520e671e5e55a3db09d24878e8fe40aa1418c536a55b2a019e539c261efc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 35.8MB
        • SHA256 fc3e5c92f981e5e47e77e2a93825e07e056bd6ef25bd1310e683e3b2c3d43cef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 33.3MB
        • SHA256 6ca7551aa3943d37e81ab78cc6faea5d8660d3f55abd1ee5cf2e9bda9fdabd3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 33.1MB
        • SHA256 34f7b76589ccdc72e656d04085bd99e7dd7870538f829ec9a84197df8e180581
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 32.7MB
        • SHA256 870cf1196cd201d9f02bb1bfb6d2c2ce87f4c2158cdd8996e5dd729349d554f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 32.5MB
        • SHA256 8ac0771a48cb36fd0957a4314b09559fbdea5a20c195d28ebb720788815423c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 32.2MB
        • SHA256 3c2fc7817c5c4e1fefae15e9a5b206be8aadb76516d8cc8eb6842bc28d9dcd89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 32.1MB
        • SHA256 f4d54b116d4189b83f32c2bb86b77ba4e95a61ff9a35f0382356daf3694ba7c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 32.0MB
        • SHA256 7e91245cfd496fb9abd7d43e2a8daa72a4b5b81180a2ac689db779f6daa72e91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 31.9MB
        • SHA256 877eba7d1efc599accaf6692e7b0940cc7fa19e02e4b37c7f51935ac7c5dc195
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 31.8MB
        • SHA256 c3e06b09ac17fc5384fde84889beed98d558ecdb996baedfa8a747f639db5bd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 31.7MB
        • SHA256 cf08c824ee1eeb9b3881cb646de94b7f19d25822a9637157673d7364636e7a78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 31.6MB
        • SHA256 88ee90a61432e40623b3ab67f2f9cfc5f75488fd63cfcaa461e8e49a4c0310d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 31.5MB
        • SHA256 b05e70a69c53aa75595a4491fb3aba6b9ebf320bd775834580cd33af449deb5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 31.4MB
        • SHA256 86b42d1ac893aa6ab18d8e5769e48b2a93dad3d2881617a417878e7ffa5e9612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 31.2MB
        • SHA256 8b4f38052e3ad5415f8973f9c6001f613c1294824d5e4c3d0e86aefd6c99cc18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 31.1MB
        • SHA256 23fa7d8dfe5aca43d5d84fae0197493bab775a32b18b6f1a0a507b37594864b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 31.0MB
        • SHA256 4b4ed0190025ba2a3c2e8d3de6f7fba06a95e20ac2e91e69d21c7264e23dd62e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 30.4MB
        • SHA256 6f81dfadb8abe8dfad77b0875799b47ee0512e00c49048e1077c70020f9550ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 30.4MB
        • SHA256 268c88e79fac4d7e3ac88fe8cb6c42a4f92756afe081f2c72d328f1057979827
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 30.2MB
        • SHA256 6bbf45e404a143ded57f499a3f6eaeb0cac93ab6ce4705a8faefb23d08696353
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 30.1MB
        • SHA256 837e36de5780809336908e4a5c73dea07843dd1e96b50359c4cb0d1e43a344a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 30.0MB
        • SHA256 f4ad1d6134b994a5deca1e0a83ca10cb896e6f64e224a72dca9a19a9d0d43d18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 25.9MB
        • SHA256 23781f68eb9445e83ea1dde7b7915d6de9d907886293250cdbb421ff759ba8ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 29.6MB
        • SHA256 c7b54001c4946cdda6b48cb786fcacd0edb52550f6249f484f8b777fc1ac6ce6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 29.5MB
        • SHA256 173e09269815bdefbcc8fc4fa1498019d177f73a0ba7f47bf82f0e59340c7393
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 25.9MB
        • SHA256 5e33aa2effc291a4a40b27a4c60136d3952091a8b49bbde4e523006565dbb4e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 25.9MB
        • SHA256 ed5da33345cf1899404de188a2c3e85b2cf786c939975a17dad7414152621470
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1488-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2852-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2852-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download