Overview

overview

8

Static

static

3

2026-08-01...d_.exe

windows10-2004-x64

8

2026-08-01...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    145s
  • max time network
    134s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 01:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-01_2274356bc49ef9a33e7a9e139f7cc745_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 41.1MB
  • Sample260802-bjag3sbk21
  • SHA256 ebf53d6ab357e3deb78067aac04a14ce7453f56dd814fbaf120697bcdf7b9196
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_2274356bc49ef9a33e7a9e139f7cc745_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-01_2274356bc49ef9a33e7a9e139f7cc745_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5204
  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_2274356bc49ef9a33e7a9e139f7cc745_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-01_2274356bc49ef9a33e7a9e139f7cc745_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4784

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 42.0MB
        • SHA256 f0d50696a76f0e993de862d7c9f81080eb5b501e58f72398059a9f67219d2f90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 41.1MB
        • SHA256 ebf53d6ab357e3deb78067aac04a14ce7453f56dd814fbaf120697bcdf7b9196
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 41.6MB
        • SHA256 0d35e7ea8e72d61d11bf852aa697c0fb8421c88690e33d1d73ab353630e25dee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 43.2MB
        • SHA256 fa9ebbead0de6f11697baa5a02a5754444c45c1ae74301e7009a1f7838cf799f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 40.5MB
        • SHA256 46a0fcd1094665ebe61aa15fac28d93c782ac5064355d89900f75c9606557eca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 39.3MB
        • SHA256 5f7e7e8ab269ee5bae96974d11234a6fba9f25cca9d935fcfc6160e34c420337
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 36.9MB
        • SHA256 fdebbc11b8bfd18625a63488bdbab3a84e208f6f03e2866c3e9588f419c63251
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 35.8MB
        • SHA256 f658f3b14c5a08cbd28fc923e89a726421ca128f63b1fdae9221a53ac700db7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 42.1MB
        • SHA256 394b34b8ad8e9988aedd1f7b0044352758878bf3f55c630e1d4ee9d6b78d5ad8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 36.8MB
        • SHA256 b4c02a258c000eecee204f60bbda5bf92bf140e30584b7107177984962b04ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 27.3MB
        • SHA256 8b42ad56b05670ed57d31e466ed0894333ccf9080de032b21e3da7863707fd4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 29.2MB
        • SHA256 206e01933a7d679a94e8799f5ca2fb396e60f2cf402d7a1ae85f27e77467a396
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 30.2MB
        • SHA256 9a48f98d2b4a84ae85b1abb2aadda3e80db8dc00f734978ab40a728f2402e6e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 29.9MB
        • SHA256 ecd80cedea91e6b98af277ef591e49371824be073d9749ccd2e31b9102f6d96a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 29.1MB
        • SHA256 ff3240d757a49354e05fd7f11dbc5da538e618f4c813b8e43637d0e231e85332
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 26.2MB
        • SHA256 f359f6792c897d8849bae01456a8a6a01d33cd016ebce50463d1e6aa39c23d69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 29.1MB
        • SHA256 2675db88f41a4533390cf9b699542291787b16a27e77fbc7cd329b00f1e61474
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 28.2MB
        • SHA256 c847f669e03c5df20d47777a8ddf0edc1ad40115cc5769eee3cb00567fd81342
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 25.7MB
        • SHA256 788d017a2d7504af4c1955c6c1ad8873027a7d2579d803ad4f0ff478349a1174
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 25.2MB
        • SHA256 ba1e3bc71fc1ffae81b5b91ac22a8566022da567d9f0f40d5d74cfdb8873866c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 25.2MB
        • SHA256 078e42767a52926a1f1afbd4863b684eb9a540cf9565a24e9220f8146ec63551
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 25.7MB
        • SHA256 6180a00f25cd7a8ae24866441876f23e721969d16280e1e0f4a4282944b2fcef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 25.0MB
        • SHA256 47a1b88f68be2b6bc78a2aed923251a6fdd7b0b7d9412bf3ecc20d1c81527141
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 576KB
        • SHA256 9b9dd530b295572b4946420b8542313a6c2a581d9a9ea1114d003faa51914d08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 21.6MB
        • SHA256 b8742a444b0d71b1080d65da0c87f5fa8852dc9d077a3cd2b761473d40fb3823
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 26.3MB
        • SHA256 0c6f4079a1e037fa1fe0c15491f110579636d8c0a720ec2d6101ca790896f191
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 21.2MB
        • SHA256 66d11f24f108d7066f50fcca9747c7cbd8a8db87488d5128e299a1f929236603
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 23.0MB
        • SHA256 7308e46f58d40c5cb886198eb02acbea85e3f852c8ce6826ecc50bd87e0e2076
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 25.3MB
        • SHA256 683f123efef5aa03ccc128d9233a955363d94910173b26fed7af56d4ee9d4726
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 25.7MB
        • SHA256 bf83f1fd3029a7a3e04e80b06197c5183b3e8e1a367e698c4b1e684d3d10b067
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 21.0MB
        • SHA256 f7667215d936699cad23fbd416b114f55914af1729eacb2c96731895cc87d9d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 20.9MB
        • SHA256 9a55af2a587320241188f0e8e63f8118d2df1796c7f0d7c992eef36fe2cbf5a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 23.1MB
        • SHA256 4b290fc4676a437afb5f42c6ac629b0429fbae2c1f962d642e175d827b5dd077
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 22.2MB
        • SHA256 aecdd3de2ea5f2e400339fe0373d65f84ac66bb70c46bd17677d40c3d107fbd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 22.8MB
        • SHA256 30886651fd0af1445dfc98f4635033afc2a993189a6d30929dec73af497d7352
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 24.6MB
        • SHA256 fb48a9d6ab1c96d612aa27e60ac797956a0002e399778d7e8d5579e1077f9ecf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 21.9MB
        • SHA256 6575158945632689337c225b4a29dbd92f0d43a4922e743774b2c6501e3b6263
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 23.1MB
        • SHA256 ad903a8dcc5df08ac7174ffaa4f6da62e92b625a0ac30acaa86cb4ca3abdb1c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 21.1MB
        • SHA256 1d2315181cd91f591a7ccdd1a1128a1ad395b15a472799eb1ea49b3eb28b8593
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 25.5MB
        • SHA256 e6dbb19bf159b3a06f3e60af4d5a0aab835b9a8d494023c4bf42ac9deaafb1b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 22.4MB
        • SHA256 da45c8c16da42669d2322500ef9e8d98fa783f5f530ad2484ebc3dbeb6cd29d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 24.4MB
        • SHA256 71946ec8e17eb91e83ed049550d9640f617c319ae66f0ad78d253b231130ea09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 21.4MB
        • SHA256 645d4149e8d096f85eb9f8fe5fbf44d5b3631dcf5cb23ba45015c856b9d0cc38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 22.2MB
        • SHA256 e2a46b037b5a7e237ca3927b31fa22b53f17ef024132353742ec26ebe8c33026
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 21.9MB
        • SHA256 1c73a97ea7d2e0ed7b9e3d706b118fb699e2c07728342368d0282c44b4bff901
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 18.9MB
        • SHA256 9aa1102a36af8137ecdfa02285d7522093dbf02289e1865090565d79bd9ea04d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 20.1MB
        • SHA256 91d9fcbcec7583d3de9e4e4ac6b2e2464e79fc5cfe3b772a27e8aef06d47f51c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 20.0MB
        • SHA256 418c797744f78dbbd967f5e50823a7dce2fcfebc63e30c332fdc2ee95357ab89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 19.9MB
        • SHA256 ab4b3ed2375fa6748e6f8fe4e8f73deb369344d950ba3ec3da27768e4fd7faa6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 19.8MB
        • SHA256 b512d9b9368147c17c7f81fadbe39af8478b8021aca6f2bbb8c42cfc1eb12d23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 23.4MB
        • SHA256 d1158befb7aa63d4134413523976c39c43d37ec2934ddbeea549794ec7d09aba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 20.5MB
        • SHA256 a0ab9c2746c5bbb8b40669b71d2aff1a27b0ca710d3af475cb0908b53166e92c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 18.8MB
        • SHA256 8436552777d2b34bf8db9e57861648c1cf98f22be0dedff10d568ff543e2987a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 18.7MB
        • SHA256 d080be59d2cc5c55c1dd46d4d053acd8c9bda81328e0c792a69197a32e074cf1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 19.2MB
        • SHA256 a9034454d569a879b247d1080f48378a7ee39a190137c9de8146b880fd161c04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 18.2MB
        • SHA256 c9f91724d063b4449e1835546016330dada262109a65c601e6da6ec4884dc360
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 35.7MB
        • SHA256 99df1856736af97f47db810506516b59feccabcb3ae59bc8f4ba3f2f79350ff8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 34.6MB
        • SHA256 41b59a8d20c6f9b223fd3351e45a063019b95a340f8432a206209a2b72c44415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 33.7MB
        • SHA256 8dac26e2cd8301b9701ca910c19606badca585684db359d736225271f97876f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 30.6MB
        • SHA256 9766fceba2a23308f03b130b5eaba73ed3aeb95bdc751209763f0af3199c5378
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download