Overview

overview

8

Static

static

3

2026-08-02...ar.exe

windows10-2004-x64

8

2026-08-02...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 23:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-02_c262c1e9e4361a8d63873dcdba04450e_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
  • Size 14.5MB
  • Sample260802-3q1rdstfle
  • SHA256 7fda616eda8f646980081ef1409070e32499667cad436f89d0cbf7e2439e8547
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_c262c1e9e4361a8d63873dcdba04450e_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_c262c1e9e4361a8d63873dcdba04450e_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:6040
  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_c262c1e9e4361a8d63873dcdba04450e_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-02_c262c1e9e4361a8d63873dcdba04450e_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3904

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ClearConvert.htm
        • Path C:\Program Files\ClearConvert.htm
        • Size 15.2MB
        • SHA256 a4c29f1437eebd66de49f25089f8b0985d98a7c2a5da0022a3bfe31b087326db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 29.3MB
        • SHA256 4c4b64a68d9c269cbb52d7652dd7238c9653db26352bb6355c254381f8a59b71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 29.1MB
        • SHA256 8b7cf35da2dd09fbad47e7cabf6df535e8dd99ce0a4e94e6470c8e7386095758
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 33.1MB
        • SHA256 38380082635044202d8bfdfb5e302bd5396e6d0a3b989e95d6b8cf9220b117c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 52.5MB
        • SHA256 a45eee36909b00df5eb4029897125f4848a65d00341a6950dc9fc3820ff7daab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 16.6MB
        • SHA256 64c8147ee64831db0221dfc35203805d6700aeb6f46c73ab45138f8f4378f050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 29.1MB
        • SHA256 db257b435ce62fba1aac45251eface3f958ea2e4726267d7fde74cc170c12071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 20.6MB
        • SHA256 6d71fe5a26c3f3eeca818b9bc0171d7f12be172db602c75d48a030bcc9f392b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 14.5MB
        • SHA256 7fda616eda8f646980081ef1409070e32499667cad436f89d0cbf7e2439e8547
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 30.7MB
        • SHA256 c89f8f5edfbff533293fdc80ee1b630fb98395c770275fd7a00db497cc2c0328
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 30.9MB
        • SHA256 7cc79dfa1b01df2380ea067dd1c9f10cabe037b4dc7696a359e6798418a0f6bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 32.1MB
        • SHA256 d280a398bbd47bd7f93044821cb278ce4e28a35109612b981eee642eb00ac45d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 30.5MB
        • SHA256 37d418b9bb752b1b4fca87116e52fdba9dac82b93f4945f4a85b86a80b30c6fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 29.1MB
        • SHA256 cc926524eb83d32edad57dee72945e5cea51282995607b9bfef61f87ce29c401
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 29.1MB
        • SHA256 c1dbeb24bf74ba96f92621b7aefdf12a24b972e71581fc65ffe227209b22bd83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 29.1MB
        • SHA256 28bfca9321b13ef2a033c1474ded22e6aed715d7e58d646db9e805ac45b67360
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 29.1MB
        • SHA256 f508e584b3f507eb3f10954a202439710dc02859a8cf0f3ff015cbbb793ad606
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 29.1MB
        • SHA256 0519d341356f3ab11d74bdde60b0941110127d64c9d898dcce731ed7d955bed5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 29.1MB
        • SHA256 71bb71a7527a802cdcba53a9b99611fcd1f85188e39e112a9b7256c00b7aa322
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 29.1MB
        • SHA256 b5fdf6258b6eb8a4db3b93237a97c02e1943e6975c2c249405f1d6ffe69063ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 29.3MB
        • SHA256 20f94ac844cdc128fbbdd7c885510f79d539ae42128ed6a11dbc389c176491d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 29.1MB
        • SHA256 bbd3f4f98a5e2433f3bf567e33bdd2adbf09938fd946ef50ef33aadbe71c43e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 29.1MB
        • SHA256 8d0ccc29299e774a8fbd1fca51742e06479baec207d95c3b8335c5e18588d541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 29.2MB
        • SHA256 1bca56b84e5e1955b694862f2a69ee41c2f3d501fdb290e66978b5242391e712
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 29.1MB
        • SHA256 319735beab263764e3f154274cda193a64f3b087c0b8f934b051db849ccc54fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 29.1MB
        • SHA256 2d095feede6e7dbcf846a7d47faad80a628c4cae141d86a1940b0dfcab1fa6f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 29.2MB
        • SHA256 52d1ceec9c76606ca53ee4b6ff06c9ae308a821be54fac8f5d59b357d8e12714
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 29.3MB
        • SHA256 6670f84344d1cf05180d41e9800688faa3aab039b64cd5449a55095f9cb83346
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 29.5MB
        • SHA256 f8e3d709e9e55f699465e0421f023ddc0741351cf61d50e7889c81905b1f58c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 29.1MB
        • SHA256 435a467f98ef7b2e6d93ade4817e280b830c30ad1c565faab745801ec04b05e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 29.1MB
        • SHA256 01f56c277b81f526ee262e6349b32bdb351df56a1651a54376da3fdde95f32a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 29.1MB
        • SHA256 d41982589e01f3cfb7229acba7fda9edbc458f17f411aab9a6362150d1f9cac3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 29.1MB
        • SHA256 2998583153417fc34cd601bfc940d815e39512685d4254286ed080dbc50f067e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 29.1MB
        • SHA256 fb7e9140491eadad4ce1001f12fd10cc465859d654dabd02eb122af86d14d5df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 29.1MB
        • SHA256 e697048be75b8ed16616fb3d5b456afd7e44039175be513d191d47a7f5e05272
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 29.1MB
        • SHA256 bf31a110ba0885428fff15e3129e61578d35d42dc2be47cbcef780dd7c80ac81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 29.1MB
        • SHA256 c2ee2bdefc9d0e9dec9be694761f81ff3653302cd6a5e85bda70a5de11865855
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 29.1MB
        • SHA256 ef32b4de1fc83b5e80eaee942395af7a023ec65c1418a7c2bcfef3f86fd24181
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 29.1MB
        • SHA256 74a28b84cff19a825d87f50e2e4e8ec6d0f5789b2e404273bedfc20ee085449a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 29.1MB
        • SHA256 29ef6b5b80a9df041538813f44ac70fbd5951bdc177470c9a525fe4691c08324
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 29.1MB
        • SHA256 9741a44e1fd587b68ca4ab53fdb41c989dec3e908ad2c9e1c7adb1c73a8a83bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 29.1MB
        • SHA256 57be9e39131b28e0e6940453429f8a49439e0fcd13149eff08e41ed11daaac88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 29.1MB
        • SHA256 ba1cde415d14ea5add3542e7dab5978447b0e40ae588ad672ecd57293e21e2eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 29.1MB
        • SHA256 01db2200a2c475b0d1e28d0f092a74cbc81bbfaed999a1c65e8fe05d556e0f36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 29.1MB
        • SHA256 d5362769e613179b7082d48ee50f28a253d3472302d86eacaa641e6fb1227f90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 29.1MB
        • SHA256 3b6a917ea246b7a9b8831f31d2e6b4e1f93d46ae73c0283bf9c45d3b875973a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 29.1MB
        • SHA256 31c2a7a85b8ef2d39e57012c26cc29476002ccc453140502ffd9bb2e9864a7da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 29.1MB
        • SHA256 70ec4fceeacf91ddefc4c363d2861ebe1fbe4f770a1fd3880a9b9358049d6dea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 29.1MB
        • SHA256 2472d47330f85100995ebd5f4dc51ea247f0e11331144d3d31b03d3b30f1030c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 29.1MB
        • SHA256 2d1a2e3708d1774f9b7af6d85ce38e21776107a5e537cfbbb898d840aa73013c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 29.1MB
        • SHA256 1ba789879c0443fe8017a1375d5fad7c167ce277e6b3d3d21e5614f1fe73dc21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 29.1MB
        • SHA256 b20989640d88c7b929d72e2215be800c90fe1456f3f3382e001bbcf4612e489d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 29.1MB
        • SHA256 97d57a30cb284b896fc2914eb4df5b5e49b4c775058509e32c8a6e2cda79357f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 29.1MB
        • SHA256 fe241ade6da234d57b2430daa66af58bd4a21e4f9c0ebeb4a202c82a0820382a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 29.1MB
        • SHA256 e7e9cc02e09c6a574e2e71189aab7d1a07b8fd078860caa1fbdaf083e6ad9b91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 29.1MB
        • SHA256 43dfc139972e699b7a4c2e98d882bd6e1c530c08c46e7dacc4dfba11415fe399
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 29.2MB
        • SHA256 2e1e468228afee2415d62202ae94344f0c79c684e118e8b14afa1a98870b0e08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3904-20-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/6040-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/6040-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download