Overview

overview

8

Static

static

3

2026-07-30...ed.exe

windows10-2004-x64

8

2026-07-30...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    46s
  • max time network
    94s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 01:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_e65d9262a85cc6c1fe55deb843ffb756_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 49.3MB
  • Sample260730-bf1vvsaq2x
  • SHA256 c1749c267a0e8197d5727620a491f1e080e5a41c771452152d0a2f61f0672247
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_e65d9262a85cc6c1fe55deb843ffb756_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_e65d9262a85cc6c1fe55deb843ffb756_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4028
  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_e65d9262a85cc6c1fe55deb843ffb756_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-30_e65d9262a85cc6c1fe55deb843ffb756_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3252

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 25.0MB
        • SHA256 ae55f70f05cb1d13a81e041d9b3b2bee3bb4d51c8184b674c0e1b463610e7357
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 24.3MB
        • SHA256 57758d3a006a0e9bc2d41dd11173e785b6459860cf1aa322de3266685010c11c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 25.4MB
        • SHA256 f509d229d05ae8b8592675ee2824313b941726b2d4aa25df40432e5756d42218
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 25.2MB
        • SHA256 be337ac86e963106ff767812b52bb059c09605450e99ba923f27cbf7dca35a96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 25.8MB
        • SHA256 95177f8edd87b37d65ec10920dbecf1fc9eaf452636aaa7517b923f28a090607
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 23.8MB
        • SHA256 dc64a710bf11189272231813e937d1af893d861cdbaefc6c2c9907c39f05c9a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 24.4MB
        • SHA256 cfb717b352311201305efaa087d20be3478a80a96fd1ef044db4dd3abac4c752
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 23.7MB
        • SHA256 f2718f813debd6ad10ba604f3a9ed3cb6e828795b2c478337c94f6880848f496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 22.6MB
        • SHA256 13a9f8835c54e34735670c892c4a321d58f0eb6099fac3a6540aabdaedddf85c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 23.6MB
        • SHA256 2dc49626d74fb1a889b757c7bed8aa51f4256fdf87b1c66482585cb32ba4787b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 22.5MB
        • SHA256 89b32c565e25f56f6cb638278cf3cc025b3816e09aa147f967ba0047f9ef3eea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 22.9MB
        • SHA256 c25b9dad7d25d153bae7cd70d41320934893ef392efe9ea42f01c29e164127be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 23.8MB
        • SHA256 99b08d1fa7b40a1d7f6129d44674cf002cec940deb62230e4c4c1b15fc0f0760
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 23.0MB
        • SHA256 a364f971eae32868e1902909dcb3bad9f79f802bcd46b6038cf42867b020808c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 21.6MB
        • SHA256 8adeaab4205aacfb108bff0ca2119bd37e13f916bc98faa66669f6fd118af4e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 22.2MB
        • SHA256 4b512202583e282b17ad9f7ca06b2677a450fac8a92338310e50bf9fc008c2e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 21.0MB
        • SHA256 26acba51b97cd6dfd2d7581a3ff45ee30aefd4ffe343f6fcced04980eb0e59f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 22.2MB
        • SHA256 f6b37f9a50e2b8b37d6d09e5af7b44f24d6f23cacf1df67c4f6375085da217ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 21.5MB
        • SHA256 80523b8f9136ac61c1b362357d1995bf47a181405e618d6d78a3852d562ff0d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 21.9MB
        • SHA256 4fd1fe6a948d2e88a7d12c730e6bd00bea203864fc7fe416a4a6d354280168c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 22.3MB
        • SHA256 38dd66829fc0af00abf3a3c80734c669a2cf6b1b713616865d42dd4b74f0109d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 20.6MB
        • SHA256 48f1817d17f8e58d3b13ee9b26785838e2ad78e01e970b8924e49e23a28648da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 20.4MB
        • SHA256 08658c98bbd0a72ae99c2e66029c03957c61ed069848fe1437301f5bc1d4c432
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 20.9MB
        • SHA256 72a4ab330c8eb247a6f562f7dd64b00dc57296a6d5069264ceab9ce75c04ae78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 20.7MB
        • SHA256 74a6a5c2631df11e534cf1e4eb5e7d7fecf8a95d456fa339707332e6fa67a076
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 21.1MB
        • SHA256 a9da2edad11990734cf7917eb9934d96d51c84c4661d9a1d60b3e294efd22bd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 19.8MB
        • SHA256 5a6118499cf914424840b47263bd190b0425cc2e399fe1d962ca46f0fd6eba7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 20.2MB
        • SHA256 65bc1762d7ff8ad245d4a210ef2ebb093fef209cbda7aa76e5fccd6f4f28c723
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 19.6MB
        • SHA256 b8f2e65b54589670cc41137b266847ad9da795034e69623f45e01e2fa3152f95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 18.7MB
        • SHA256 d03ecc0f19b2c298862a7642c294b9780b9f97ca1b26f1d4b816f41d3f4a7f21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 18.9MB
        • SHA256 f45be6492a5ac0616aa71337cc98e4fb44f74d671641f6408b24fd6650a6b521
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 18.8MB
        • SHA256 e7132de6555c9c00ad35f9d7769b3f683113cd79126c7e0c6af76c9d1e26829e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 18.6MB
        • SHA256 72bf9601dd4c535711f3bbfd85a0dc41d8b46e75ad282e7f0646a4674977ba4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 19.2MB
        • SHA256 2ca005c4746fd909186b5468d2185f2b56ef0ba941d6161202e6542414fa23c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 18.4MB
        • SHA256 1f78c38bf96f84847a9f3608e94a75ea781c9625f5cf375a8399d9d0af8bea65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 19.2MB
        • SHA256 0f598cbaca2bf4f8ab61db092382264d6a8a6647d3de33fb33cd934698588e0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 19.0MB
        • SHA256 e878ae998429173ef26bdf97af6f679afa63ba936b0aefac1213926cd6897f5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 17.5MB
        • SHA256 b67622f7a7b942983672a90f73768367b09bf24f999c93b831156dc4b3dae766
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 18.0MB
        • SHA256 cf2dd17c3f3b1e40f29d7dd90c14c262a4f8859808be33143752d4458cb77cf9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 17.3MB
        • SHA256 7a1739ee007f757ab8b2c6725ff70c579b77b7ea963ab67df1dbdbaaf8df52c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 16.9MB
        • SHA256 025d292eb7eb713e3f428c44c62bba7bd541b7028b42b0e1ac827efcebb1c706
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 17.1MB
        • SHA256 829087388c7e3e01eae9cfee03a4246fa905d3460f00954d56480119992e1f33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 17.4MB
        • SHA256 cae22410b17e37a0c68b1ad992831119c8ef71d6e73758c63893c73e9b5a5c04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 16.4MB
        • SHA256 1227914fd30c95c663305a6795d46b3a0313d7c7c1e422686ee22c1a4cbb5ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 16.3MB
        • SHA256 82f8482aae226b968210bc0526b7e7af8e68691df5eed9c2f153133554d91dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 16.7MB
        • SHA256 7365db0af443b12c472ec4a7018597f65f9d741fc64d7bccb67b46047ee5dd4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 17.0MB
        • SHA256 b1a5a94ddb5db492a41623f380083ee598db1e07947fad82cb6a92b8c3595d8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 16.4MB
        • SHA256 349d3a6828f51ac0eac2dee21d3326af4c592f5723d205a1bc908ad7c2d5947b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 16.0MB
        • SHA256 90bebd543a554268fe402039356530af7d81ef3058e4168dc3d9c67b6551195d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 16.1MB
        • SHA256 51cdc8f1a9b0c9786bc812b5ef320245788110368b759f70fae41a8fc50afef2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 15.9MB
        • SHA256 03ba1fab6d3e1a07d28a760954641f3435bde63f2ccdf95242e496656b5d5dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 25.7MB
        • SHA256 fa092bd517197b6a66d8aadc8544b4714897269cf3dec6cb1eeea66df5daadf7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 26.8MB
        • SHA256 180bf86c738d238a8df569e085f22cc29a492c675081b094328bb25b828cb782
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download