Overview

overview

8

Static

static

3

2026-07-30...ed.exe

windows10-2004-x64

8

2026-07-30...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    100s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/07/2026, 03:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 49.5MB
  • Sample260730-eebfcssvgs
  • SHA256 89e131df526e61a7100e7859e20eb29e63c4e1b0a37db82bb3a3c6e754145036
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1468
  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2124

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 49.7MB
        • SHA256 2a103185cf092a5a269233153358abc4119356b9bfe0dbe66243168f955b9b88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 50.0MB
        • SHA256 cdd6b875a33c2d57e2f57aad6ee6bfb288cf6c0b082c7a1fa4b2b8a5383d14c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 92.6MB
        • SHA256 c3daaa47278eefef18b524fc455848024a2debb9925b88e2231300fc21fe5d3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 77.4MB
        • SHA256 9d98c56ba14f5647a80027f6f8aa5386363500538de0eebb66d2b19fc8361888
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 83.8MB
        • SHA256 79de7bd1b31245fb942e3aa8d5bfadb9cd574a55c9c0c60b51f64112ce19a988
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 83.2MB
        • SHA256 065d33ca7442c8157235a1d27dcd04051c75b062db26c7c56f77b05601e7a74d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 82.2MB
        • SHA256 8312cc84f6ccc6eeaceaeb94509b9893ca7205b4e2a511a2180a1e3ea0a5fa21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 81.1MB
        • SHA256 a78d9671454d0f8680c0796461939d1594285d6e78e04533c6a18672acc81258
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 54.4MB
        • SHA256 880e6714568d4623e2ba22532c41ba06e2931087973dfffdf3a28824b6359dae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 57.6MB
        • SHA256 10f5bb7d11c82e1b6a5ab496bb471e28c3f99d6556d00c25e7012fed230ae80f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 51.1MB
        • SHA256 9eab0e726b8fb89aaff87374ba0e0834f03823928fb49ce194cc85443f66b331
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 52.4MB
        • SHA256 bdf92991294399373b1527e58339cf272ed9c6f7ab444ac7937cacb34d09012b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 52.5MB
        • SHA256 bdad2f90ddd489ceaeb26409101bdeb856c56ed4b782b39908e06c28cee04ed9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 51.8MB
        • SHA256 e85fe891e2253e65053c0d1e84d49c975051f727f57fd7ead28c0a8f5da0381b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 49.4MB
        • SHA256 0742b92fcec4453c2019124860f6e098da63e2f91d3e23cea8ba50a51fc3c709
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 48.3MB
        • SHA256 13f0c6c4b7cdf8e57730ddfe351da5da65f1cb8338e1268e2cd7351d87fad31d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 45.6MB
        • SHA256 fa70307b5d17469d32e3123a77d62628b80d89ea194fe57bee8bbc781fc139d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 45.9MB
        • SHA256 5e31a09c36ce8382c8f9488e90c5118b397d73c445313db4c40e72dbdbc69552
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 43.1MB
        • SHA256 137af160a4c709cff170f448b22898a9ac220322cd7efe8b51a142e15ebb0c07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 43.3MB
        • SHA256 ca0635a0c34b9b23c657788dafe44bc5afed07b97baaa239499dad670ef8b36e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 42.3MB
        • SHA256 5ff133383ebe8e2307ad6ac9c8b851648d13609a932dabc0fad8234efa15fc95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 32.9MB
        • SHA256 63c85b15341b5ea69202f19a900c4940c5c41f65df3a1ea1dfd4875a37ceaaf1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 31.4MB
        • SHA256 972da1d182b0b69a36955844202670f899a6d9aa0394acef6ea0521b5e75076e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 30.2MB
        • SHA256 8693c04ecfed21d2b835f60ccd06b7d8345819e62212b150a5f7619aeac79e80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 28.9MB
        • SHA256 12dbdcc09856c8ace24d1be5b1f88d84e00ca10738d5554115b5799e8a4dac9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 27.9MB
        • SHA256 7ac7f6d74ae78ca58fdf1e51a4016df12875351791a1ef71837c52db977a7197
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 26.9MB
        • SHA256 83ba26f8d3586c30999ee182536cf376f2e75d8dc70ebc0c2e2436897a51ee2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 23.8MB
        • SHA256 99b08d1fa7b40a1d7f6129d44674cf002cec940deb62230e4c4c1b15fc0f0760
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 25.0MB
        • SHA256 ae55f70f05cb1d13a81e041d9b3b2bee3bb4d51c8184b674c0e1b463610e7357
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 21.9MB
        • SHA256 5a36705dd7a9fb8c1b57b6376206de879818ca453a3b21fbc5274a341d951505
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 24.1MB
        • SHA256 ebc073130c1501e5cf08ff87407403aa5351ee8f17731bcd7e0cae72c8058bbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 22.9MB
        • SHA256 b19f79b6bad5ea6a5cfa352c1e61fe940f95c9086c9cc1d7791f65c152a54d71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 22.9MB
        • SHA256 c25b9dad7d25d153bae7cd70d41320934893ef392efe9ea42f01c29e164127be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 22.2MB
        • SHA256 4b512202583e282b17ad9f7ca06b2677a450fac8a92338310e50bf9fc008c2e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 22.5MB
        • SHA256 89b32c565e25f56f6cb638278cf3cc025b3816e09aa147f967ba0047f9ef3eea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 22.1MB
        • SHA256 c0a8698498b40e7d25fadbb98fa77b280f1c35cd871ee2d2f9601e4da9faa657
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 21.8MB
        • SHA256 9af4ccbc521976401166a8b69edab6a5a309f485836b20969eb5333a6ef2094a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 21.6MB
        • SHA256 277bf879254f5c9e844d27eca5997af66043b6e4aed5c095c0e908886503f4d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 21.0MB
        • SHA256 26acba51b97cd6dfd2d7581a3ff45ee30aefd4ffe343f6fcced04980eb0e59f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe
        • Size 19.4MB
        • SHA256 819a7a90697246eae8bc763ef4949d2aa05c0b5db980b16e9bc3433eed7afa7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe
        • Size 20.8MB
        • SHA256 56dfab3c3d45454c0726a5536cbaefcae24b139d407107f01fc236147850d557
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javacpl.exe
        • Size 18.9MB
        • SHA256 59c2e91e74518859824a9e2cd4dafb419688ea0b1b90c1ddfbe5e1ac8efee68e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 49.5MB
        • SHA256 89e131df526e61a7100e7859e20eb29e63c4e1b0a37db82bb3a3c6e754145036
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download