Overview

overview

8

Static

static

3

2026-08-01...ar.exe

windows10-2004-x64

8

2026-08-01...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    01/08/2026, 14:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-01_1b7e16ef7d78372918d342feac8e41dc_elex_emotet_icedid_njrat_remcos_vidar.exe
  • Size 11.0MB
  • Sample260801-rmvv7ack71
  • SHA256 049c08a1f2db81ef660e9905e3b402de50f952c1cb84248c992cb6738d6ea836
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_1b7e16ef7d78372918d342feac8e41dc_elex_emotet_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-01_1b7e16ef7d78372918d342feac8e41dc_elex_emotet_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4572
  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_1b7e16ef7d78372918d342feac8e41dc_elex_emotet_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-01_1b7e16ef7d78372918d342feac8e41dc_elex_emotet_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3348

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 11.5MB
        • SHA256 e85b59a4b0617e1a919e436f16f161f4b45f6c6cdd58fba54280185d023114a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 11.9MB
        • SHA256 25f890944263fe12fd1a5a2f01cc6f99b466eb98b257fbb22f2194c80634dcb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 11.0MB
        • SHA256 049c08a1f2db81ef660e9905e3b402de50f952c1cb84248c992cb6738d6ea836
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 13.1MB
        • SHA256 ef318f79192bdcf11ef71048094076d14aa6efb07b1d1f7d9139d8fcb1fc5965
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 12.6MB
        • SHA256 1a6ff68bea3240885d357aa126ca74e8e09b5cc72d0bd8ef1de574e86bb4d0ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 11.0MB
        • SHA256 57c25e17f59b629f02b3c15cda9b70d07c53daac6f29f587e36da34a81a0ac9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 11.2MB
        • SHA256 03ecb44d806f3c94c10a470a94efa2d0116c89a498d8a0e3424086f41591453e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 11.4MB
        • SHA256 e2baab3b0f3b94ff055f80c6c8bec366d357b176a557010be59514b587d59178
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 11.0MB
        • SHA256 12ed989f7f5b802a418d3bd440a9eb489a79f0deabe76948f1584775a2f99773
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 22.0MB
        • SHA256 3c0b38e72a2c10c403910f8bea7e0d326b9f2af0c9d9c9c16f67d93523bd4633
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 22.0MB
        • SHA256 734cf9fefc36ae18f94148a2adcc3c459efed443f17815f08c7c663b6399d8e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 11.0MB
        • SHA256 305ee08e3e17e2d6c46b588d0cf7198ff697fa7d186ac207985bd4ddd7a47245
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 22.0MB
        • SHA256 4755207a6c949855fb380134588bea95402a435a2bc64aa12b18ed39ee5f47e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 22.0MB
        • SHA256 d100059a68dd2b04dabb20bf87b247159eac2c01f051a30254b4b41b68466ae5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 22.0MB
        • SHA256 f574320e2b60e786bf00a651210942f66c0b6cb8e385a64b21d19f4753e46269
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 22.0MB
        • SHA256 1a5e7d1218f7bb337365eead29e0ecefa30ff80630ad6385c0c10571340cbc2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 22.0MB
        • SHA256 870f5050d0403d8b4aba29b1b2c4b59c9eecb767807c286f26e0c0ffe0218fb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 22.0MB
        • SHA256 281c058789dbbcbe22eae7cfa537a19fa4a3654dd7decdaa68125f881479e270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 22.0MB
        • SHA256 ac46a34fab799f2d892cb3c27233b5f3d758bc9bffc4ddc56acc676069db9af0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 22.0MB
        • SHA256 0ddc38ad7fb240fa112fc68cfe322aaaf586596476bc26f41e4b5c4914582974
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 22.0MB
        • SHA256 15c5d83a30ec53aab344ceecf4ed6f39aa3e473b789ac0a137f997d5b9b26baa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 22.0MB
        • SHA256 2a7c8634266c84cfa6f91ad8ae4d0f606e462b79676069ff99cd9bad0a1c3d71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 22.0MB
        • SHA256 e97c10de7093a9e3a15ec65f2d9d2669f4588edaa02621625dcc5c282ee1ce8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 22.0MB
        • SHA256 8379ab4c7a9f0eaa706440105e2af9a391234bcbe07c7b6db001b5571b6068ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 22.0MB
        • SHA256 47f2888d1575f6f6ff01f764a5673e4111ddc2e8b6a425e4050996882b93ff8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 22.0MB
        • SHA256 7e0b5a412be103f1d7920559ea73c76536b64ef3278a17c5a6268bebdb8465c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 22.0MB
        • SHA256 219c7cecadb88963138d21ec90affeff0e84d6580863b82ca4948d99c8966abc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 22.0MB
        • SHA256 f0f8236cdeac316926d91c6bfa174a311bc20a6ed42bfd9767b83f8b7751c7b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 22.0MB
        • SHA256 1931ff2bfa4e6dc076fc656e8ad7a1fde938e7fc71cd82fc98c12519abb27833
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 22.0MB
        • SHA256 ff4735f5d30bc1145ff39c3989ea885010ad0d902684e65f74bf6b30eaa9b885
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 22.0MB
        • SHA256 bf4e2c5ccca835602c7d4f65dd8b203926684fdd1f5221fbcfc33af26ea6fa2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 22.2MB
        • SHA256 f9017a6b7ed9d530ce004e016c4fbfc4e9da2dd0427d4afa707daa3721ff193a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 22.0MB
        • SHA256 f38aeda65d3f3efd7fd295bba401a174fd93a13deac3dee27baa78e346df83e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 22.0MB
        • SHA256 fbf047badf0df4930d98300917d022dec0d0f81731382be8463965b1f3c9d742
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 22.0MB
        • SHA256 6564d580c36365407cb1f4795de13dc8cdb3a6d31d515fc5e1e51f28c0d75317
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 22.0MB
        • SHA256 4a03b6cde70b833b87cd86b49dd6791cb4eb998f48f9e29a4333b30590e53993
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 22.0MB
        • SHA256 f6afd69a81fe258046d3ccc64473f94dc938bce727a4a5e7158ed867af5f6993
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 22.3MB
        • SHA256 0d21b63ecb46f2d6f51de5e3410bd1efb08b0aa8e912c7e98db7cd17530669b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 22.1MB
        • SHA256 448f2f88f1747472898de3ab8a36791daa88d47fd0351ad4a4f3655ceb9554ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 22.3MB
        • SHA256 67a35cfb20dd675aaa87c0bc7aa3ad18bc27916ff20256d1b49b985fe380d400
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 22.4MB
        • SHA256 98bc496c0b59a753f4221d813a96eaa251574940990843fe4ac49807c5a2529e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 22.0MB
        • SHA256 9152388969f36bec11e1c6da35366e2ff8f48bce4cf88d4b6237133b568814da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 22.1MB
        • SHA256 ddb54a11c6ebc93294e6d6ef1b6c3067b79ae1891e05aa69b6609e71dfc9774a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 22.0MB
        • SHA256 5f15d6928a88d49da3a69fb3223db7f957e4212758a5a2ac79df6479e72b83cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 22.0MB
        • SHA256 b163c09d42c61170477d35fb0fa01e0083ad0e377b1cf7dde52c2bfa7d424914
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 22.0MB
        • SHA256 942449c6d875b9e2f4aa82ec2a95ac83a625e21a072f5cdaa37a2dbfcb129775
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 11.0MB
        • SHA256 6826b8a0bac737e709612174c16c7f5792421efd4a1ac0300fd19a84561e2d66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 22.0MB
        • SHA256 a588e2721ab0a4fde6d95b2e91fef8f8a891cdee08ccb061290f8746a9f6a4db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 22.0MB
        • SHA256 c8b0292fdba27b85109e7ef594d88ddd0667ba78aa22285ada76d95dc6009c37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 22.0MB
        • SHA256 b78f6617d35bd51fe73443ff21a3d2ee1da2d8d1bbd53048d7c7c3d9af27114d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe
        • Size 22.0MB
        • SHA256 8bf4d45f045f3008c619ae35f02acb770ae179e2bb04fb67ecf744bcb5be76d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe
        • Size 22.0MB
        • SHA256 9401751590e18c7900c8b5823ef8918db0761db83a9e3c7b12dae5972583df4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe
        • Size 22.0MB
        • SHA256 300fd9bd6fc10693ee99a6b93a03da70e67c72f9a1f751d5739f7739eb778380
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ssvagent.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe
        • Size 22.1MB
        • SHA256 64d33ac0321cd2086f1e58ac89a4e13be007456965f67af8914bf419791d6307
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe
        • Size 22.0MB
        • SHA256 272f98d39bec1881cec6761ea89618c18fb3ca0987d999d243becbd30597c17a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe
        • Size 22.2MB
        • SHA256 0f566d2c684e6cbd56be8c427213983a93396cc7a5f9d5ec32f72fdcd8aad8d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fontconfig.properties.src
        • Path C:\Program Files\Java\jdk-1.8\jre\lib\fontconfig.properties.src
        • Size 22.0MB
        • SHA256 b142e4738a247fc5a36488814aa8b6f9dcfbcf2b804f118501e3fa8de1390c8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jre-1.8\bin\jabswitch.exe
        • Size 22.0MB
        • SHA256 8ef579b45ae81fa2f6ca4f3ec667bf2dc3a46f7f6dbb9197d76a42299998e2b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jre-1.8\bin\java-rmi.exe
        • Size 22.0MB
        • SHA256 59f9fdb2fe74debdd60c339848abe6d41315ea9792cdf04ddc3437f145b3d605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jre-1.8\bin\java.exe
        • Size 22.3MB
        • SHA256 300883e3f1a1b4f781b4644f1e101631c06d68f2222976f564e72de610886d07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jre-1.8\bin\javacpl.exe
        • Size 22.1MB
        • SHA256 0ce08064aa4535a5c1d8f1130e2cf4edcaeea70d60662de700ee0c57a4e38eef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download