Overview

overview

8

Static

static

3

2026-07-30...ed.exe

windows10-2004-x64

8

2026-07-30...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    108s
  • max time network
    117s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 01:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 41.2MB
  • Sample260730-bdkqvszshx
  • SHA256 1d3a5acb80f4423841af8f5349031bc7699e3b426916c4abae0c0a03a255853b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5680
  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1668

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 29.2MB
        • SHA256 475851e3e4c0d15bda88de5efedb537ffa5e04b1c0977b1833d1c233e215cbfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 28.5MB
        • SHA256 faa24f66e47aa27aceff28e65cad69b7138243b344d02781e6e4f0e4530c47a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 29.7MB
        • SHA256 69e30e2d5e8b2a1eb60e90f741cea58f56da8558286a2c528572d51859572cf5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 31.2MB
        • SHA256 ddafc24ab00fc8f85b10c2416d0dfc0ed5326f65a9b6ef86aea443bc2f5c2716
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 27.5MB
        • SHA256 9fc8c54ef3f23093a52a708d866c1168964915f9070a726c0f56358453861fb3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 27.2MB
        • SHA256 bffbf523c084e2b25f037e49e1a3308e18f48dacdba0780b87fd0a1fbe6862b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 28.3MB
        • SHA256 9b0fd2ea29b2579f5de484578c054f33e1093ea472260f979dd704fd9fa285e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 26.8MB
        • SHA256 a99d55049ee82c4012bf23875a52786d3d6c551ce08c4845a04faba009434bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 28.6MB
        • SHA256 516a20b624b24acbdc6d7748e787d6608862e4303f62da0dfc58ae0fb41d9b50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 28.2MB
        • SHA256 3f3c3714448992cdb4b1da0114b6b5feac5b62d48081c07ff0e0690fffc5156d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 25.3MB
        • SHA256 7f36468ee47cfe41b02772ef7668f5211bffa3aef0609edd0217530891b2a11c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 25.9MB
        • SHA256 78f5baaa0aca252afe6baa3ccd62ed2c94e52890fe10615d64cf80f75d9fa8df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 25.6MB
        • SHA256 250e711ab2c9751a9fe4880fa6eb3ccb1fcc47ddf66c89f75e1b8a7643e94a18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 25.8MB
        • SHA256 c769f68dd405d284afeecaa013084b214d30004bfc1866923d2721c068cae814
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 22.9MB
        • SHA256 c25b9dad7d25d153bae7cd70d41320934893ef392efe9ea42f01c29e164127be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 25.2MB
        • SHA256 872370fa0b8720426554ed8d649aca3807e12d226900d8ab57d603b014c06650
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 25.4MB
        • SHA256 0eb68b0aea69b9de3ea997d5973442ad87a52baf6bb4d9f54bc1b40d7fd737b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 25.1MB
        • SHA256 6e5e8053b2f409af7f48d66b44ffe522bd630de626dce951039cc004ce6e1aba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 25.9MB
        • SHA256 05619453e07c3f85e5c285645fc8be14fffc146059302d80f63a5583ea09ea92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 24.0MB
        • SHA256 34a7b5e06cf681292804ede071b8f33eb9f40f9164874186fd0b776ba6d7d7e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 23.4MB
        • SHA256 15cf99a731dc9ae943ee30b3514e3cda84c2cf8a91ebc9d16e0bd1ab27eb834f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 23.8MB
        • SHA256 9d1aed0273251f69ebb1f63d61b74b0ceeb1ff74fd210edef0394ea493829701
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 23.8MB
        • SHA256 99b08d1fa7b40a1d7f6129d44674cf002cec940deb62230e4c4c1b15fc0f0760
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 24.2MB
        • SHA256 7cb1a77c1a7c0307658a09f203a722d234c9bb4196bfa13039b1243d11f855e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 23.1MB
        • SHA256 0fe8c99aef5c50b6c057e3fbce24d863e0ed246011c786792fbfcaff959b3f99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 23.7MB
        • SHA256 f2718f813debd6ad10ba604f3a9ed3cb6e828795b2c478337c94f6880848f496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 22.2MB
        • SHA256 062b3a4392b2afd04ab418dbe89eeff56279c7c6cc7c23409e73e764f9ef3f64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 22.1MB
        • SHA256 c0a8698498b40e7d25fadbb98fa77b280f1c35cd871ee2d2f9601e4da9faa657
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 21.9MB
        • SHA256 4fd1fe6a948d2e88a7d12c730e6bd00bea203864fc7fe416a4a6d354280168c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 22.1MB
        • SHA256 b47e8534507fee763b610a23da222d95b948b10b95116455bb413e0fa72bdd8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 22.5MB
        • SHA256 89b32c565e25f56f6cb638278cf3cc025b3816e09aa147f967ba0047f9ef3eea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 21.9MB
        • SHA256 5a36705dd7a9fb8c1b57b6376206de879818ca453a3b21fbc5274a341d951505
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 21.1MB
        • SHA256 a9da2edad11990734cf7917eb9934d96d51c84c4661d9a1d60b3e294efd22bd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 21.1MB
        • SHA256 a8bd1a021093ba952a995ee000b0003ac19b36de108667f82fd845eed72df829
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 22.8MB
        • SHA256 8a309024456b00eb80bcad5139b6ad3619d2889cba5df7cfb59b7601af1d69dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 20.2MB
        • SHA256 65bc1762d7ff8ad245d4a210ef2ebb093fef209cbda7aa76e5fccd6f4f28c723
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 20.6MB
        • SHA256 8c777629dc97b5fa6de72938eee6d6119284fed6f28b5eebf096c208d0e73c79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 21.6MB
        • SHA256 4aa9cb041bea33d31077888873ea7489d297f62e19970c39768e25c3e23a9b56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 19.6MB
        • SHA256 b8f2e65b54589670cc41137b266847ad9da795034e69623f45e01e2fa3152f95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 21.0MB
        • SHA256 26acba51b97cd6dfd2d7581a3ff45ee30aefd4ffe343f6fcced04980eb0e59f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 20.1MB
        • SHA256 0bfefaaefda9e1443365bb1455fc7df6ef95319aeca970f212533c13067b865a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 20.4MB
        • SHA256 08658c98bbd0a72ae99c2e66029c03957c61ed069848fe1437301f5bc1d4c432
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 192KB
        • SHA256 c61d5a2b5856b5a273a4b636240fa277afc38dae069b227c270bb7f4cb23e995
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 20.3MB
        • SHA256 bcd8502ce9f54361748169916568bdfc8899c7dc0aa56f2943ea0cb0800862ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 21.4MB
        • SHA256 9d7b8343c8df2a656494e455a5b5e8199cffaec4a82c141bd75c2463dc2cb125
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 19.2MB
        • SHA256 32136bd1f6709775ae531e448d4caf6d252e5f1bc24230833b1e139b727d33f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 19.9MB
        • SHA256 8109a6e29d61912973b6d29ce04e128370d189e430520ee5d65158d88dfacfd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 21.4MB
        • SHA256 f418bbb270ddf5dfe2ac70109d8ec68192a5f8d6a8ae939238606ae50af30dbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 20.1MB
        • SHA256 6c63f0fff17323e8c09f01edf0d1160ccef268a95736e53cfcec4b52b79258f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 19.9MB
        • SHA256 657824c50f9dc09ac2d518c9b5f86d0b5cdb94e277b0deeb04addc33d9936bd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 18.4MB
        • SHA256 4955633f9128773c15282458ad00b4005cf880f9619b00fad17c29416efc47b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 18.9MB
        • SHA256 f45be6492a5ac0616aa71337cc98e4fb44f74d671641f6408b24fd6650a6b521
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 19.5MB
        • SHA256 5fe1ee190fd2aa4d91590671a0d291d2fb2bed362b0bed2f99bdca54b0c542a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 19.3MB
        • SHA256 666f5f192b268e06c76aff1ee48c568a85b9f4534a7009f37ca2d473437d800e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 28.7MB
        • SHA256 3fce3f60d72fde91652e8d73edc078d11f750752bf1fee2d04da560ba9947d72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 27.6MB
        • SHA256 bb54123f665862d9c673c56f99bb1368df2197aa8317887b755164dc77877422
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 28.0MB
        • SHA256 667ee7a3f807a2f74f693cb599bc971757ed8a84c001587b8ca6c4058966b945
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download