Overview

overview

8

Static

static

3

2026-08-02...d_.exe

windows10-2004-x64

8

2026-08-02...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/08/2026, 16:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 13.7MB
  • Sample260802-veg6xaxbme
  • SHA256 551836077a9a6d9dba06bdd7c75f276393798a524c3c50e3e79a4910135ec592
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3544
  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-02_c5a74b9c37d68cbd347524b10f1c5d20_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4528

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 14.3MB
        • SHA256 a1fcd2270cc4151b723e10df0520cf94b07218fd4ca49c42b244e4f47ce3ff4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 14.4MB
        • SHA256 801c5f5cbbf7671ed741983ecc38d186c8bd9d74945260e0e169cf49f5a1c397
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 13.7MB
        • SHA256 6c331cc912d5f7d7ae3c3a92e1983fcb79fae60b2756e15b8549ba6d72b8b216
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 15.4MB
        • SHA256 96e6e85bedac96177c0ad0eee59b227d1d58a35ea7d9a36defc4fbdceade0250
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 15.4MB
        • SHA256 5050ab22d14099fa6714cb8bbbe410cfa12503ac21f8373cd1e201576584a9f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 16.8MB
        • SHA256 77f1a0a0e3bed47ce1807b56cf688d094b6beeaa97d0780abcd8823f5c9a5523
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 15.1MB
        • SHA256 fcd64b072e179fa6c93bbdf54fe2a26881a738af0cb6aaefd5f8d74bb364e1e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 27.5MB
        • SHA256 4f7fcc29c7bba83887452349e734c007bed73c756c047780d307230b9ede9863
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 27.5MB
        • SHA256 6f635ac4b43f5385b979d9d1b1430678911a43ba3504bab16d64fef796577cc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 27.5MB
        • SHA256 6f49f40f05ed56024a7dd91bdc711d4b1633fc38879b76df88bf586c3e202cfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 27.5MB
        • SHA256 2c56cbd922f1fc314046189eb265b680e31039d33913fcae792f31366581cfff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 27.7MB
        • SHA256 9b105a273eeb433eca5507bcb9ce80d85d29a6b6c71b9976a9b85d6dfd386201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 27.5MB
        • SHA256 3358ed19f732caa2d436da3f62a26405cf27a9f70090cc00f21bf21a533dd70f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 27.5MB
        • SHA256 2a2ded2e6324b1231322a3de0621d065a1d7ec62b7f99980d4b592099a9a8c22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 27.6MB
        • SHA256 ac25c9e6b020db5c792b6463e2dfb33ed0f8ede9db59fb1fbd3717423b5b85cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 27.5MB
        • SHA256 46a799c920c6ab245f591d0e21796bb6a6c2bc3ef3ed73b1dcd6e8634a4258a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 27.5MB
        • SHA256 606ee8880c33c03533185a65c38eb7fef2015e45565edb6300501904b27d4d7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 27.6MB
        • SHA256 fde421d8e726ef7f200df9fc098e266625eb1924bd7d2976eeb831f0006c9d6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 27.7MB
        • SHA256 175f4d179826a14955c0cba22a9d3b6a253ca27c268f2c25355a8b5e6e31423c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 27.9MB
        • SHA256 2c87b79735a2269c3ead99b5fdc13b327fa103ff96d33bc2b1e89d1ab671ab0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 27.5MB
        • SHA256 68d5a0e7fb94da40b9d8b5be724cc99c1cba19148b4dd744a8de43838a29a853
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 27.5MB
        • SHA256 8f8c61211942c16986f8f87c7815acc9c975763c6738bd6ed5694065bdc4de48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 27.5MB
        • SHA256 535e9ca4407b6cc791311da5459ea2786d1d6fe85b21fc3e63a8d8043049d1c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 27.5MB
        • SHA256 7de05e6d500c6fe061571d3a458dd5d13cd152f5502422ec7ea610c34d146101
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 27.5MB
        • SHA256 2760dc54e140cd2db86ec587cd4b00e08346fdbbcfb29d471be85ac2cea74487
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 27.5MB
        • SHA256 b797c385a69d4d190b01231ab997558752f1ed6241c1c337753e323dc81eea98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 27.5MB
        • SHA256 c82a78458919411ff785509a5020cb7c771a45a4389c8d8c7346c73fb0939ac0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 27.5MB
        • SHA256 928db852e23cd06d16b49ab49843f7e6746bc7bf12a2a59321c1f009980019d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 27.5MB
        • SHA256 07e2ef2c180fb3874df573bd1aeadbe0b06a89f9b562ead695c6e0ec84598401
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 27.5MB
        • SHA256 78eba12e07bc008a897f13dd0a30758af187b5aa8588ba2f20e3bc9eeca75f71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 27.5MB
        • SHA256 151aa2f0c29aaa987ea8577ded573e0e7bb017232980715e5efbc429fcde71e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 27.5MB
        • SHA256 91c1b91b202090f341d3fb238f74b33ffe491dcdd995314fadd378482d261573
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 27.5MB
        • SHA256 12e747a60dccc14c2fb8eeac233777f5ef39b51768e237c4fb884607eaf0209c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 27.5MB
        • SHA256 153ed0df63e99d6062647c7cb94581db612f2cbc9f15a58764a63c1c6ad53e2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 27.5MB
        • SHA256 8154a226c7f66ea535cfcd439ca609e6ba41e05dcfb82ce0434d2ff91c47cdef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 27.5MB
        • SHA256 e3115e6a7580bc18409c6c2d2d0ab0309be6687e6a5ea23cb6b878118b06ecc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.5MB
        • SHA256 83cc34bb8cb61ae68bc515f732ef4be773e871a72c97ae6093b1786ef4fafabb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 27.5MB
        • SHA256 6bb90d6311a138047aee209f8cb7c86d8a13feecd4689fecd9f126ebefbc3772
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 27.5MB
        • SHA256 004cdee2626a07ef1da5981e6fd8de08098ce02e1d42349f602a7a765f196b4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 27.5MB
        • SHA256 fdfcae07c54e1d0f28c826fe8fdf61955dc036aa9fbba9581aa0c47162c66eba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 27.5MB
        • SHA256 a30b07aff46d5f73db10ea51b6bae3cd3cc0bf21a40d6bdb92a50a216b70ac84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 27.5MB
        • SHA256 3e17b2d7d2598b1547fc2d3fd4f00866fbf626ec8a99204e294970ef1b12dfdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 27.5MB
        • SHA256 7104a4bf314e13eba8707200d01d47e708ecc0ac526861597c437091304f3935
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 27.5MB
        • SHA256 7366d5bb2c08fb2e2516c63b8db5f9dc378b98699004aa1d070614e71630f6c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 27.5MB
        • SHA256 5ca522e8d7e589416391375af479191da4a04a331fac8e71410142717ca5e033
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 27.5MB
        • SHA256 bc8678918749477a0873cfae08410cb11f9824cdaece466e2803fb0ad89ecb1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 27.5MB
        • SHA256 1f8bfb827f144598467fa2be7d63f05f77bd1e77245b6346381bc48d73fc2342
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 27.7MB
        • SHA256 913f7e67e8100f2008cf34a75f98f96849c4dad8cc60605b081543da23b12652
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 27.5MB
        • SHA256 e4eb5673aff3362232417a3f8eece6dd647593ca8579b95271eacc336adb45b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 27.5MB
        • SHA256 3931bb222e04f94ad6bed72527d6b82d22c2380136150d9b6373308461529e36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 13.7MB
        • SHA256 c2103c4b05f52ce1feaa955f8ccbd2ba75c4598bbb4d879b0bc1592f8b7a8cfe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 27.5MB
        • SHA256 df4850c8a63ab9200219d29ff3053bb287f58cb879461e8d0b39fd51aba3a17a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 27.5MB
        • SHA256 52ee75b4bf388e2ffc09f6ae8dc9edce63372bddb30f7be62da1e11fb9e81730
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 27.7MB
        • SHA256 42b0d6c9e554650b67ffe1f3237e61f992e885e3f3362fafaba06c1d952c2ab3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 27.5MB
        • SHA256 f37de6adfaaeee424248dd797f80f4b2162b814d943ef2561046bbb4f73a7857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 27.7MB
        • SHA256 74aeb42f8f6af69a6b5230b30d14b424cdd7bd21bd4c1c8902ab6646b3b5177e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 27.9MB
        • SHA256 cea33ce1cc6781ebe1a8f2c749153f8b5960e5001aced6dc6e9e38985f2d88cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 27.5MB
        • SHA256 e5b72d368570120761719f4306af802ce61a3a2c557c6c3d31712bcd34a3bf4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 27.6MB
        • SHA256 58f916caf11b8a03b43f40492fcb31aeccc864fdd359b77a215e0230e7de48e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 13.7MB
        • SHA256 551836077a9a6d9dba06bdd7c75f276393798a524c3c50e3e79a4910135ec592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download