Overview

overview

8

Static

static

3

2026-07-31...d_.exe

windows10-2004-x64

8

2026-07-31...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    125s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    31/07/2026, 23:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-31_afd62ee40fc5852fa90dfa8ba03cf471_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 44.6MB
  • Sample260731-3c47nasgpg
  • SHA256 e1d8266b26c7f99ca5f49737e1d7fa3a45c5d3758db39abf7213d3d618a151eb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-31_afd62ee40fc5852fa90dfa8ba03cf471_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-31_afd62ee40fc5852fa90dfa8ba03cf471_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4788
  • C:\Users\Admin\AppData\Local\Temp\2026-07-31_afd62ee40fc5852fa90dfa8ba03cf471_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-31_afd62ee40fc5852fa90dfa8ba03cf471_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4160

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 44.6MB
        • SHA256 e1d8266b26c7f99ca5f49737e1d7fa3a45c5d3758db39abf7213d3d618a151eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 89.1MB
        • SHA256 722a40ab726ff502048f9a5cd2254c3bade814069005d4c2be618e568a12030a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 89.4MB
        • SHA256 7e1a54842c2bfa85e2b17abd7df394ca817e3b98a3c5fb39862ab4f9ac241b69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 89.2MB
        • SHA256 e1edfdb9ae8a825e78995138d0f908c8a7060251e2377571ab0be36d15fd18cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 93.2MB
        • SHA256 810f57e2e84cbc74fe6be46d4aecf398012ca190491dc3fe017953f369da8680
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 89.5MB
        • SHA256 af134d372a5a72e2a6f8f99acdb1a3dda94e8f60a807c9e9befe71888212569c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 46.7MB
        • SHA256 6b7d1c7acc1753bbe6fa6cf176b532d6c7a562b3da3e9c1dfc71f5b719dcf97c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 89.2MB
        • SHA256 4566c441adb5048e394a6c90b223937c85c27e9aa62613fd09c337c8094b7af7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 90.8MB
        • SHA256 7487e7512b69c81874047476dea005dd12b4dd4dc383b00f69c9a50843f45c60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 92.6MB
        • SHA256 d3f8dc5ef754e101ef15f772f7486a4adbf1b4d347d9c4c57cd25f2deeddb0a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 91.4MB
        • SHA256 68bd95e97307530e1a1cf44ed8355fa877456558e88a821ff4775664e169e852
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 512KB
        • SHA256 595a5b5a2733117f82fc434c596f95f193f35681402fd1824adced12d22ee4f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 91.0MB
        • SHA256 8a4b03e638e9de2d2b2509a2308f66b793e615d3b6523ba9316bb366ad2519d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 92.2MB
        • SHA256 665ad9b9e6db56edd2716b908579534a158c0ab6a2fc1426a07da4b9a22fb8dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 90.5MB
        • SHA256 c569ab86788f6bf9f8f47a4994786f0321f10ef305498c7fce20539b1e9cbc3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 49.5MB
        • SHA256 3a3b33ffe8b6cd43bab0126a9af1431be5807c430b07ccd867d99b93e8803329
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 48.8MB
        • SHA256 f0dd628b8fdee54b412d455903c070aadec6e3c17350f5a2b4bfa2abb2ac6e79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 52.4MB
        • SHA256 a5e0ba6ebe729fb0bba93936ed3dc58c8451117c5a7b8ec3df03675d415bd239
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 45.5MB
        • SHA256 b5c4ef8327bba276870a0a8fe38bd1872737e1724431868b559a4a7584bfda53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 42.8MB
        • SHA256 724f8f994b539bcb5a61ad1303d952886ddbe1b2890694c7b5b366cc57c37655
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 40.6MB
        • SHA256 166207d56e173128ed42441f4a0b312f9a9781f8a016300deed2df365056ef98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 38.9MB
        • SHA256 844d59d1f9b0ab12ef7eb393d5c732985c20084825ac339849189f1d5ed774b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.8MB
        • SHA256 e4783a78ffb78ecc917663915f0e78dad5eb65909ab3e99d44cb58c2c13510cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 30.3MB
        • SHA256 f24cf89242726845c8116bf77181df383ff5871ae7ba176b6f749e10d8adfcf9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 28.0MB
        • SHA256 2703f1c74d1d2f70536cba9ecfdff8430e6c03c8b0fb66b41dfc00c45378056a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 21.9MB
        • SHA256 060539f61fadc36a0ef0fe7a82ab723dfa3ac7c50e35b6833414409563630220
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 21.5MB
        • SHA256 f66c33f7b64fbb8ae25b433a40a07f7c9c51287fc8f4af20f03a70d69c39afc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 20.8MB
        • SHA256 17b353046c3e817b12a543c031971135e76d64ddc012d821e9f7efa0b7421aca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 20.3MB
        • SHA256 30fd2b8d9a4718c0a00138582bb94057f62628aed324719d71ccbe7b22e46628
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 19.9MB
        • SHA256 acfdded33a71bbe8a3a54a68ff79932ac1a9519ff30b686816456414be511b10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 18.8MB
        • SHA256 6a84c2fe0ae1fa781ca2858491226d789a053704f31958fd18903c3607055660
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 17.3MB
        • SHA256 60aa5d168af1bf37a4a98ee233c3f3c59e23be18d1c14bc17bf78b5596453361
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 15.8MB
        • SHA256 cb2817ce7a30c2ba1934aed92d70553b3771cb51351c476499b2a8352f826c30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 14.5MB
        • SHA256 5e437fe6579b0e7af9b3556b91275ef1d8447606bedf5d1ee28855ef6bd7b81c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 13.5MB
        • SHA256 9272a1be0d5f3f721ee811cbf9e36fcb267945d84dc07267ce20de15c9203511
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 10.6MB
        • SHA256 ebbb91e14e53d2c8bf199af077a77a7360efd950accb54ad3b25b48ecdad31e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 10.1MB
        • SHA256 bb676d84c1d8cf9bb4005b5c8ba7e5b327341e71f599c2d0b3400359074aa211
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 8.4MB
        • SHA256 d7c974368ae7bcf7961dee97b79a32c2b7cac20454392d0cd9c3aed5bdf23754
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 7.1MB
        • SHA256 419acdd3ff88581c50c88bcaf31dc2dff0167c554b67be36817f683635c3b161
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 6.2MB
        • SHA256 5f002dd3c474788f5a1ccce8b6dec7421bda4373d0e98f51118908c18ec53420
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 5.1MB
        • SHA256 b837694c29b66027a71207fc85bc5397042bcb8a21f5e59b3f1f9641a32ba431
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 4.8MB
        • SHA256 426fce4013772a785478ba0957358d378146b2f665a516cc8bfe5b41a4da1a7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 4.5MB
        • SHA256 fa45731fe75d93b8e4fbcbb2cf827c27f3521f890b5bec4211a1458fa0b275f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 4.2MB
        • SHA256 581461bfe54891e620feb6c5d0c79d80558a55836402d38767d251cde354f8b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 3.8MB
        • SHA256 a9839e925ab74d6674377113057e7ea6336b3da4ba6d33bb318c3a9a351e33c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 3.6MB
        • SHA256 97b8aa9a4c7ec5bad64c142bccf6ea0dfd8a82e9c9243d967c2a8b12b3bde80c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 64KB
        • SHA256 561e710c0f12a9ecf3c544ad6eaf227983f3f3f2dcce0bb2f803afccc641ad14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 89.2MB
        • SHA256 50e8b0ccb47a2c4888a204c229f86a56310b94fec3a6202f60fcc089954bcabe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download