Overview

overview

8

Static

static

3

2026-07-28...ed.exe

windows10-2004-x64

8

2026-07-28...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/07/2026, 04:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 6.9MB
  • Sample260728-e2sm6aeh92
  • SHA256 d9c80c7d00572343fac42cdc318de66cfea6cea9161bdc6f8860fab96a8e9893
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1996
  • C:\Users\Admin\AppData\Local\Temp\2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4756

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 7.6MB
        • SHA256 f53b2a7301b4cbb761a8291ca80ebc8c56e8d6869808cd311bc57ac5dad330ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 13.8MB
        • SHA256 53403dd4ca90302429688379176000d9efb67e31cba6b60765cf5b69b60aec2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 7.0MB
        • SHA256 038d3b048d42dce1fc88ef68b7fb4ae717ed65154588812948671d07ed518d3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 19.8MB
        • SHA256 f6ee38485233df29c2d781d9daef1211aa4d64931c8d326287c9b98c5e350dcc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 15.5MB
        • SHA256 300a53af89afd238a4aeecabeeebdb5f06287ac120edeed1a23a1199f84bdb1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 17.2MB
        • SHA256 fa014fdf276a59a57dd74b3992b31a7d1cc64de5483d5850a35a7d8d5768f9e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 16.0MB
        • SHA256 2388c9a5ba0649cf0ffa38c7c5e0f89be1d6d43a172f7168d2106ab6102ad62d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 15.4MB
        • SHA256 3e0039f52b8801a304147814b39f5585a8febe65bc064b298c104e754dcc201a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 15.6MB
        • SHA256 35a625ed7b5a9e8fb40140173e60a4060c3286d999080e96b22dbf24aa6941dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 16.8MB
        • SHA256 25747504c5e145133b5e5b3b9b2c71e4af264f35b26515168161b6cfead2b644
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 15.2MB
        • SHA256 ac143a51a382fba90996b9e0f4527899e899ef7580d5132f59d5461504a4c64d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 13.8MB
        • SHA256 d7bef32a3ce665cca09c173aa36ad1a2db7efbf6e9f5bfbfcb67048e4299fbb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 13.8MB
        • SHA256 74f0b72fa53a6ce0f543608f720a6ca5a851e42369ed549bc2232925c31106dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 13.8MB
        • SHA256 d28c628b04f0133f3d151ca7903e5df514aec99852e2f97431dbaaad51c673d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 13.8MB
        • SHA256 cbf6e9d0529258ed417ee429755b09a98cdfacfab4e0cb670031388e48c11809
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 13.8MB
        • SHA256 597334dcb41a1e0d9a676bc117464957205882c014a2ea43adebf54fb3710b07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 13.8MB
        • SHA256 1ba8ed8eec7ebbd2e067485d43901debcbd57fb762ef0479fb94eeaaedbfdeee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 13.8MB
        • SHA256 8b0377504330e1a8d6934f5f933fad674e4426039b356cd54f40e430e2458a18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 14.0MB
        • SHA256 9edf1c6ff6f3183b326a360dfae584bbfd18822bbb6b2ef79242abba1f4c90b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 6.9MB
        • SHA256 c6e858f95205dd71c5fe1b2e37816e88185473cb35b20186b72c0b52111eed6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 13.8MB
        • SHA256 a9c1942bea3a1ef84c36b8a63c0cf7b8171b85593cf51412600854af9b6d4adb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 13.9MB
        • SHA256 eebbc1c9d5af77ade9abda82399ddcbff8a0d11ccd25a0f0266f245718f8c7fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 13.8MB
        • SHA256 f5cf659687f80fa61f2a7b44edefab881c991b3201fc448f69fa915212494759
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 13.8MB
        • SHA256 2edaf92c00fcc343e7b4b8d3fde002a00602c173f4a2ffeda6b7ffa5d77f13da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 13.9MB
        • SHA256 8b5a8b4cc80cbbb3c87b1f84404b985fe6de4412b9410ec6f19a270c43ba1ce1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 14.0MB
        • SHA256 2c9da8659555a49027f4420f0fd5727e106e2f9760f38a4d7f7b886441dfad4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 7.3MB
        • SHA256 edca9aa54bbf50551720c22f37d1d4f663c53040236bd924cc5a2561a65654c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 13.8MB
        • SHA256 22b70c79aa199f5a6836b651b74346b34714270974e27362110008488c55626e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 13.8MB
        • SHA256 89121ab4e837694a6283cf1ff8cd5d912ee9c8fa9cbf6df42276c9fee640a6e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 13.8MB
        • SHA256 2cf70d46fbedd1da4144af69fd16c2f836c8cb99f1bd18c5cb494ae8fc679e33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 13.8MB
        • SHA256 95b816978e0c8c12e5f9d48193ae351a731be1eff1fc3769a894b8eaba7ddfc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 13.8MB
        • SHA256 3829e425bbfc8ece54f75c9e3b283d2a8d5a7d76597d96e280635fa8d8eb9699
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 13.8MB
        • SHA256 0fce311c3ff4440de83a038851c90ce5c4687786fa65047a3d63daadb0950bed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 13.8MB
        • SHA256 1c84286806bf0b0576c2fd6746e4064eb96cc3b8eba6a617c216cecd090504d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 13.8MB
        • SHA256 96368cb28e3a18f6b92e5bd19f951e1a1010caeb2fc2fcfea3d10956571b2db9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 13.8MB
        • SHA256 96e3ba9b4bd9732fb3e6d9c2caa3f8e2e2eb94a3b633f1063c201b5bd5a699ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 13.8MB
        • SHA256 0c03ac784fafcb0f40dc557a36a6644f362f3dd38957d4f18f42e3b7e4272b89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 13.8MB
        • SHA256 5440ce2ee5e8e42e67d2284b022b6c58442a80a25a4f4f138f04f125462cef98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 13.8MB
        • SHA256 58b731459a5902629959a03cc5baaee569309e3dbdfa3ce7a2f75f1bda2e08f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 13.8MB
        • SHA256 deaadb689152bfba1983a5c8dd7c4b3f00aec5a82ab940e7e2920a5961fc1e6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 13.8MB
        • SHA256 c3c62085eb7c47dcf1b544e1ba560ed9572392b3c9031a4e29d8c5e62b656b77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 13.8MB
        • SHA256 80e426e624afd6fbd2a9fa4a08c239e5f9be477509ab030bbe499fffdd738b66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 13.8MB
        • SHA256 ddd7fac95e88a9083625c3eb9d3315f4df5db60585800fd7bcf4c2b257820124
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 13.8MB
        • SHA256 5c39b1e0708702058612d7acb06fa5d53fb931966bba39eca324064908d85a5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 13.8MB
        • SHA256 66159637f52f5dce511adb0ba3f337f0ccaad8570eb9f5f5426cd8b848ef40bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 13.8MB
        • SHA256 34d32466c47574e5eef41d0add7e31288bb1b6439099b3def94fb82564645868
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 13.8MB
        • SHA256 5070981ee948087f56fbab1c57059ce784681e75998c4d31eeb76bd255d2462e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 13.8MB
        • SHA256 95b8567020dd142fb68d574032b1035174ae9a2fe67700fdd6cb6140f20ab4b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 13.8MB
        • SHA256 3d8ec4586e6e862969f78ce2cc456013c3326425e8e231c1e2cbbb2e56a48d04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 13.8MB
        • SHA256 caff1a07d315bd572c00ecec749fe0f45ebdf2d590ad4eb147a0ec05d69ce6ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 13.8MB
        • SHA256 305a0a9072f2324171e1f7d00fc34ebddf5e45bc89cce35ba99ddfd0e5fa2124
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 6.9MB
        • SHA256 febacab539a8690fb48e1627b73812282b6082de410ed90ae5492eb02aec082f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 13.8MB
        • SHA256 38d88880a190ebb06409dae2466214fa0d429b5d9283b1f223226d4fc00b3c82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 13.8MB
        • SHA256 91e5d32286d46b5eebc353dc60a192390ff4e147efa0da8ef5ca7254ef8c33a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 13.8MB
        • SHA256 9839d796ed7b29dcb1396cc5e14050daf79372ae2b94afbdd013d744b04d9aca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 13.8MB
        • SHA256 ff49428478faa5b5afbfc8f57cc5e7473371b92863be9a9e69bc431dced803a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 14.0MB
        • SHA256 0d01b454d13a489569435bbda998b2a336fd960960d6edd6dc51b564c7ee3dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 13.8MB
        • SHA256 cc694b3320a7a62124a0255ae284d9b211576a179b35b1f6e8bc1e3c8827004e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 13.8MB
        • SHA256 381ac8d0bc29ce87c2147a20df2d3579b9460dda29931686cf5f74e358b532c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 13.8MB
        • SHA256 83524270ac06e1680fea573fa53e16f2cc9752ab6b1929c4f327e81b43e86be7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 6.9MB
        • SHA256 d9c80c7d00572343fac42cdc318de66cfea6cea9161bdc6f8860fab96a8e9893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download