Overview

overview

8

Static

static

3

2026-07-30...ar.exe

windows10-2004-x64

8

2026-07-30...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 02:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_f0b4e2671d6457db3e72dc3207563275_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
  • Size 10.5MB
  • Sample260730-c7c4js1wcy
  • SHA256 027830d5ce87575ee27c48de6b243927bcca2f3bbd20b8f209a37cec5120ff55
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_f0b4e2671d6457db3e72dc3207563275_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_f0b4e2671d6457db3e72dc3207563275_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:824
  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_f0b4e2671d6457db3e72dc3207563275_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-30_f0b4e2671d6457db3e72dc3207563275_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4344

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 10.7MB
        • SHA256 ecc7731e241382c57d2b61d8bf4eabfc97870ed45e5a8c1e19480e30f06195cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 21.0MB
        • SHA256 704e08b1bc96de742dc6a8b3f0bab946a7f863466a6e731ba2ac95a127d082cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 21.3MB
        • SHA256 e073ace23b9708af86ef69d42cfaf19ed606185210c14dfcbb8b2a614bc22ed2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 12.6MB
        • SHA256 f055b6ff06b17bf37d559c87bb7f816921cebb61f1fa43eb92ed01129af5c75e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 21.0MB
        • SHA256 1b85e4aa0d5edbe87be98387574a67e449a1d5ef031501803068b6438f9ec4aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 27.0MB
        • SHA256 3f69c1a97c34cfac12a6bf2169821cbb6a670445dacffafad3ae47cf92acc666
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 22.6MB
        • SHA256 aacf9fe1f3a875644c39c8b277da9d2719c34695de11c11d4f9471e0ef4db83a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 24.4MB
        • SHA256 60b8d26b83412bad14ee55ea5d50173ce18c01f7b5bbeec2fe5c398a3b4de944
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 23.2MB
        • SHA256 48f3a1d483f2c654b2facd9bf9834470acee1e05421dc94693ed9fc56a6ee0b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 22.5MB
        • SHA256 0a6e6420708ffd2b3f320a5ab9a60f4140fdd110d45db0f20d0da8e02e91f650
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 22.8MB
        • SHA256 30176d361b38206f7d01b1b3c3ca631d46202309a78d1596f5d2753e6c44cd6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 24.0MB
        • SHA256 70f60466e3e2d7f37ae1848ddab82a08c96bd0bc1b70032eb56281aa255c36bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 22.3MB
        • SHA256 465cd779f0c95a120d23d1be5896872a5e96c7183bd1f12b7ff8fe0793102ab9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 20.9MB
        • SHA256 29a057b26bc385e974d082e19abfe6f49c2abac149bbeb1fc2df96089cd1eb0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 20.9MB
        • SHA256 6f06140ee90e9cd5fd477d222d289b059f14297417da5f12f184aec05ab31a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 20.9MB
        • SHA256 154ceab406eb1c779626a79f6f5aeb2b849840629c74e6a3b8cb65bf8497bc91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 21.0MB
        • SHA256 84f472c144078d56c4334d6af02b7209a15bed6eebe8c5504e7f5541c5c5f388
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 20.9MB
        • SHA256 51c44acda6717a7e784f0af064529731e5bf9a08cbdd891bcb09f90abcc61c29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 20.9MB
        • SHA256 00cf93add929531a8132810db293939dda513c37e1d15277c4fbc9baeab150c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 20.9MB
        • SHA256 f0a1bfc74723600b2c96ab766715a3d177d83a6d3d951ebe86d711e527e233ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 21.2MB
        • SHA256 ae3587e7919e6122a218d90631d3f9af114a5802803536b9ad2badc44cf84544
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 20.9MB
        • SHA256 c328ab9f6afe3d1533ce0995c4baa83a25bdd574cb3cb1a946cac25e75bd98bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 20.9MB
        • SHA256 cc530a9e6556ea2bc741e295ee18aabceebea0c39073f8003418ffce3d0994d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 21.1MB
        • SHA256 0f383a48d4823064c019ea8350cfe39dbfc0eb158a1377fb08593154b30b9a2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 20.9MB
        • SHA256 59db7e7da3a4b1baeaef9fcbf1cbcb53a39adbd356a0aa54ae126f8c3ea249bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 20.9MB
        • SHA256 133ac66cda87a0af8e18218e4762a71d89b30d4b3094bf16187e3fc49d3f6106
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 21.1MB
        • SHA256 96e0810295a1d3a516e1f49de6130c1964b62a6a5590a87b1e80025fa193ae50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 21.2MB
        • SHA256 2c9a843828f543c1dd29d37cfc0a9b4c11c2990ebfb51530352eac527ec37d57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 21.4MB
        • SHA256 ded685055bb906a4fa896038232beed3aff01c8844de52f39bc07390781bdb37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 20.9MB
        • SHA256 bf5e24c898e5631ec4ca8768a4022cc6411f52c3a54229a57935b3f12fc4833d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 20.9MB
        • SHA256 f81143fcb35fd97065c17800117d34a0ee2d8ace3789dcc8d10b05623b7248be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 20.9MB
        • SHA256 2f3720e39996e2999a225c0b531518bf9b7839408379c20b8f5754ef064d0d90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 20.9MB
        • SHA256 ba58663ffeced10d8ba2717207f3dc0fb87415ab39c71e6df8d778ff48a87d53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 20.9MB
        • SHA256 015654d8fb419350e72caa2afc851319d1c3166d5f60adfaafe824c7107a61aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 20.9MB
        • SHA256 9dec5555785f3f663a613b8b171d54f6f4f98894aaa2e1aeda1de448435e761d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 20.9MB
        • SHA256 f4c1897a1115d88b9b63216e97b46e5aae0db26400daadf55171f14fb8bd03ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 20.9MB
        • SHA256 5426981d7ff11c8c5ac506f65650a8852412334a6aff0669f3debfd7ebc2de80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 20.9MB
        • SHA256 ca9fa3d0d2c8966bb314352cea04e18e24734a8a3290721b74a70c0982baa54b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 20.9MB
        • SHA256 185e91965ea47c598182a0a9afbfb70e0fc9c8bf66d36528ee19510e091e962a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 20.9MB
        • SHA256 ec48fb16540c5de6762d7e63b18776e6b93344c81e1c90485c1fd464c3f7f783
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 20.9MB
        • SHA256 a422d9a0c05b13f48cd925f28cc2233229f84642f6ac605a184a870ad0081499
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 20.9MB
        • SHA256 a8e56e85d618f10a8ab580144408199f3c8db9eeb88b637c8257ace9e7f4fbe7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 20.9MB
        • SHA256 736660a50fa7c70994ba8920e1109e89c8049834c5c0bb0448cf931d11e21cca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 20.9MB
        • SHA256 6c871fc92f947314070c54d2eb485305bb479fa7a8c073c10e69cf1cf8bcd426
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 20.9MB
        • SHA256 d08d1bc53052bd66762adc6a8cacde7b9f88aded20f947e9d6ee33beb06012bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 20.9MB
        • SHA256 382630d49af1642bce198c80925e2c390604148619240115cddbdccb51036d3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 20.9MB
        • SHA256 9c3e5b69f9a9009997b407c41448103b89d4fe5445adbf7d489f7062af586a28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 20.9MB
        • SHA256 f517b8bf9a47953c7783c9d43e74c95d337d777e3c2c4cc789456a2b62f6a385
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 20.9MB
        • SHA256 b31bf6c675522287b7c5054e3e4b5b18c245fe008221f3ec698b24b194a6835d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 20.9MB
        • SHA256 852e56973cd9a49fffd2606c24c2311942f37fa35c2484cd356879f8c9741361
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 20.9MB
        • SHA256 b85361e054ff5529fce5a0b4d26d8917e2a073ed8afeacd4f4e6dda318bfc5c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 20.9MB
        • SHA256 6ac0ef9833da08d3eb97e458c2cfd8daca1616c77bb9753765b6f90e9d063ea6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 20.9MB
        • SHA256 323436ea94301ea329012abdd3ff15a8df0786974ba8e7bd91827ae7de5c96c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 20.9MB
        • SHA256 6c00461c656ab460c778c9ac4eae116d8dfe1e2577a9608857370d1b89bab09e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 20.9MB
        • SHA256 89f2c123adccd0e7833c52979bdaf9eb493d3a7ec2e32ca537f8cde27feab28f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 20.9MB
        • SHA256 7c345f81241ba3028dd63ea741b8d14bbbdbf9030d58a38081aa4f51720691c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 20.9MB
        • SHA256 1db3df8b374b329621438f5b28c94109366d84ebfa9a10d80ca0f7e0b9a30c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 21.1MB
        • SHA256 f786971871c810251308b8c2c97535fae89a672d1c4c4986b62ac43adbdffc41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 21.1MB
        • SHA256 78310c92497b760247049a7da558f5d72fa13c8016a36ae8e0512e401c5d9e62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 21.0MB
        • SHA256 5b51204bd0a758c04b30ac38f529a6074bc1f8dc0192e107aa49a584c3b89b5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 21.0MB
        • SHA256 f5d0837227bc0ebdac3f9c105053ee3c5653659295186380a2ded9e356abcc65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download