Overview

overview

8

Static

static

3

2026-07-30...ed.exe

windows10-2004-x64

8

2026-07-30...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    80s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 03:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 49.5MB
  • Sample260730-eebfcssvgs
  • SHA256 89e131df526e61a7100e7859e20eb29e63c4e1b0a37db82bb3a3c6e754145036
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1256
  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-30_1f7c7aaef7c5cf01a559f70420c76b9b_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3336

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 49.5MB
        • SHA256 89e131df526e61a7100e7859e20eb29e63c4e1b0a37db82bb3a3c6e754145036
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 99.3MB
        • SHA256 57cd03af89cec5b73b673798a22653240384bf6753333236fa70daa5cbb476b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 98.9MB
        • SHA256 2f845c6e5b973f0a5cff4e447b37bf107eb0c09a1149c4012e18f22179e96742
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 94.0MB
        • SHA256 865054b84484ca59848b2bd0a6c667036518f10470e4856a48d04902ccbb7202
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 86.4MB
        • SHA256 9b5d82c221e9f6005687a4bf61f1708c2e0e5b3f89fcb84ae779b9eaf26dfaea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 63.8MB
        • SHA256 e85c0306dee69af26372b9647ccd96a8e65b49deeca1a21af5e68fd3149c9a82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 61.3MB
        • SHA256 95fa97ed07cd027ab8e086f88cdc7f9d0177ff37acb7df5524afa0c438f43b3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 58.4MB
        • SHA256 b1d2ffa26997c3b32b4ae6cafc3ecde6111a08e066d1a44947e05574c61ecc02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 59.9MB
        • SHA256 e2d625bda2a73a756b15466fc08abf85de30fa8b21ee4603421f18b165e06441
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 55.6MB
        • SHA256 7c24d413619e95c32fe5276a51d5ba0232ace26855951e0a10c4a365407b79b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 53.1MB
        • SHA256 4c3fa4ba5f9f5c5183a8a076c913d2381394a08a74068b612508ac37a140af8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 50.7MB
        • SHA256 af89c95fa09de45b8de6e58b0d446e0a11ce5e3fb395fd34c3a666848657edec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 50.6MB
        • SHA256 45f2ba3feaa1a55939b74ebb16fdd63e2e0a06db39eab3bdd0ec514df7301a53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 51.1MB
        • SHA256 86f657b5d3c1a54f62aec3b5ed000fda098b746feaeb29a7018531b98cbd4e1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 50.2MB
        • SHA256 5fbe607c492ae40beeaff4bdb3d279498a2446fba45cc4cee1197f76845cbcb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 48.4MB
        • SHA256 2755c7509f2cfc6f8f2bbfd5aa6de246f22a76b1c361496701294d7cf51062e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 47.8MB
        • SHA256 cb02f723c211150c7bce2c23a9fd14969dd4e7b620e0e4d17abef2f5f131dca0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 47.6MB
        • SHA256 65b07d3eb417322334b323bf45be167629fcebc2f1e37ecb4826f70446864123
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 46.1MB
        • SHA256 a1491f97a40b39f85254ff5462dca8130586f0c97144c4f6800d4784a390d8d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 44.9MB
        • SHA256 9215865937a24d763afff619ba67268433f1efe3e6dbc19b91680ac7f71365e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 44.4MB
        • SHA256 c4f8f76723e64b2c4f14c7006f027496cb94e01d87a5ce4d51c15b584eb80867
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 42.9MB
        • SHA256 2e749a4e8688cbb9c58308d680b79911be54e52fc7bea80764f2d4d8ddc1ead7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 41.7MB
        • SHA256 634f30c6989680e47c367589e391a9ffe49bf8858220e48c341ac191660c5ac9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 39.8MB
        • SHA256 46c8cd0fd7d7fd044a31deaa85b4ced52070970f2ed88702a6483565a06f805c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 38.1MB
        • SHA256 35681ed059bde10a4ff4f4f78653b1b257692555346e6fc5cb4717b9cb3e4962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 37.2MB
        • SHA256 8e5f0b97188eaf6b15f55982b8b0fa485af4bce8d95c7fb3a4ddf5f3cde2a04f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 35.8MB
        • SHA256 4dcc0aa3ccbcae3248c6fe6961c9915b5a5cbe0ec7701083142f1f52534ab027
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 34.3MB
        • SHA256 1f62bc4992a5336329494e2474cb65fd4106ad0cffe2e71f4c2bca8a0cad0a25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 32.4MB
        • SHA256 dc52ab768f2501c213292910bc43f7398a7f116cf501c508d331ea215fe4f2fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 29.1MB
        • SHA256 846dd2bc7df353d26051efb3f5078efb723ef5da5a20880f10d2507cf107cf1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 27.8MB
        • SHA256 8290ddf9d689aa2d15ae2f24c708984f45f3043dc8aa3e681d47fe1e6da40f69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 27.1MB
        • SHA256 9462176c06bbb398af628b6d333ed58e68e11d70f58fed6a6e67aba0c9fd688f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 26.2MB
        • SHA256 57082752ef78793b7cae39400c43e1c607c5e8bed5d2e40cbfa749e02b9202c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 26.2MB
        • SHA256 3ff984f4def12f1387691377c61edee1b166a503c6d74e819ecbfefba13b15a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 25.8MB
        • SHA256 c769f68dd405d284afeecaa013084b214d30004bfc1866923d2721c068cae814
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 25.8MB
        • SHA256 c94914219421ebc617ef9483e9afeebb0fc732e0f31e8532f9e176d8a1297dab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 24.4MB
        • SHA256 20961c5040f599ef79dbb195cdd8689d08a0be532b3003e18410f30e53a3cc97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 24.1MB
        • SHA256 ebc073130c1501e5cf08ff87407403aa5351ee8f17731bcd7e0cae72c8058bbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 23.7MB
        • SHA256 66fe962db9438e1abc637ecac72fe496b5cbaa99150120b26b5a99e95b2f8440
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 654KB
        • SHA256 b9f4f25ffb571e1da34ff1a886840550ce01d4fe3aae9e9d5248998699435f7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 564KB
        • SHA256 e5d5ec1cd8a1cbd422efae35945c11d75735a834ccb221c11e6dab3e9d6fa747
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 368KB
        • SHA256 6a311e82ae84e68adea1765ead1f9df6fe45bec9e582c56b90e6a683d181d834
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 192KB
        • SHA256 c61d5a2b5856b5a273a4b636240fa277afc38dae069b227c270bb7f4cb23e995
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 84.8MB
        • SHA256 175e9c0d7fd57e4aa8c02b92b77fd0719d35c5a416a03d783cc0c34b3198e961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 82.2MB
        • SHA256 a2f00308830ac0dd9b20c3112155e683ea70d756db89b6b693b011aa6bf9e76f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 84.6MB
        • SHA256 38df9bb2019abcbebc4ece82decb3cb61d876892a50b71877d282471c6ac995e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 83.3MB
        • SHA256 38b9fcd4327c1af2ab0523fc3f26fed1ccb92279622f91e5dd9ca5c73c3c3a01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download