Overview

overview

8

Static

static

3

2026-08-02...d_.exe

windows10-2004-x64

8

2026-08-02...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    40s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/08/2026, 00:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-02_3df75cdcc5160cc7e7aa59d698da9718_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 33.5MB
  • Sample260803-av26ssvdpg
  • SHA256 4785ea583f18da6942bd4e44388e4cc30af996769de37ff9475b3cd4a03de155
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_3df75cdcc5160cc7e7aa59d698da9718_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_3df75cdcc5160cc7e7aa59d698da9718_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:828
  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_3df75cdcc5160cc7e7aa59d698da9718_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-02_3df75cdcc5160cc7e7aa59d698da9718_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1200

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 33.7MB
        • SHA256 02b99a46e206c43bf60aa5e76feb5ff582d8e44a9dd42c74c6f47121d8e6dbe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 67.0MB
        • SHA256 537028e71bfac3c7e25124887c35a97eca9106e6cda2466c6af6b6e8db3da8d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 71.0MB
        • SHA256 e3bbd00c7fd75e3ddd1193f4bf760a75ccbd283d891ee620efba6a9a79f13159
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 67.3MB
        • SHA256 abde95db63d40e99b717534890c66151ddaca3ed023bcc0390e8a56542040c8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 35.6MB
        • SHA256 a1ce49a4f437e6ae2169bf4ca65d5cfb673060fb8a4941b27ebb827a146e2cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 67.0MB
        • SHA256 4a66093342d0ee9338e08086c2175168b52336b32e48ce3add16e043122f0022
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 53.7MB
        • SHA256 e665adb6472f9f47a46750fe8b9cc418a82d0f30e49911738fc3b65bd8e0eec9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 53.6MB
        • SHA256 fa355ab4f61950ff0010d5a0ed282a2759382d730bca293cb1557b0f074bd32f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 57.2MB
        • SHA256 0b87cda2ac467ac175e19dac66dc69c9840c773300e1d6db55acda04c889ccba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 56.6MB
        • SHA256 14b8bd5b9ed4bfbc8b7722c41c95ba35656dc0e78319a1601cbebcd333d6dcc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 56.1MB
        • SHA256 719cec18dd17eb0b85d0c8eebed0d4e886cc15bb0f85982b795b952e6130de2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 52.6MB
        • SHA256 3bf1f98fbcc228caca1fdde93072f4a45cbd5f4c3888966af2bf69c0d069128a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 50.9MB
        • SHA256 5a08f8ff95e0e48f19fbf19da07c45b14ae3fa1965a1a0ca3eb41a2c222afc43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 49.9MB
        • SHA256 9e0d5acf1aaf579aa39208c446b5672b5d97c97e8e95bcb0a3e10e4bba70a1e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 47.8MB
        • SHA256 5a2b158fb4bbb1ed941b9af8978b041a8f53890dda0751c696b29771a570e473
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 1024KB
        • SHA256 c592ee42474c6ef37f2d13f471176afbaa817da1ad48fae98f50628be63935e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 43.2MB
        • SHA256 5959f9cf7071539bef1c9c17c50003e7f9d352b91458c213ad8031a5af7d8c6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 41.4MB
        • SHA256 7c1dd54b98e1735a06ff84f26fc18e945ca5031bb83ee5801605887ac668a018
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 40.6MB
        • SHA256 ddac25f41686ad4ad64ce94068896d120abc05908f2c69b621ce0ea178bf86ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 40.2MB
        • SHA256 5a5aaa2b46cad15fd32bb829c027fd641be7bb98479eb4331eb9c0fbaf4c7b78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 40.1MB
        • SHA256 9989747ae54b3ac065e26f344d44d4407e5fd70cb151729980359ce4fe4e570a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 39.8MB
        • SHA256 24e21b01caf0e56383f0a25f7781144e547c0b3c12f0457613ad181a9ac111e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 39.4MB
        • SHA256 be8b2288d142c94db16f3d2e5d0368f80c90fdb14be67282f489253b2305bbc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 39.1MB
        • SHA256 61678ab571539e8bf8b241fef37dc8a90de60c8399ed228910827e8cb7ac587d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 37.6MB
        • SHA256 ef3381387ea20a20c31bea401853afff418a75f1e9b7d407398db3cfec77d769
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 36.8MB
        • SHA256 e287b4de74c12efb8f95c4008bbffa94b66ab422336be11ecc3361b7456a85db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 36.0MB
        • SHA256 53c303a50bd2d6d6c7621c8e523a18ea42b909bd74c07499a9c53cbc801a5b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 34.6MB
        • SHA256 c26d62fa2b3f03c1f9e88a88c85d5de8fd4577632e224700c198f6fafc9a876b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 34.9MB
        • SHA256 dbeb62cd79214a1e819e0549c75d14bf2c60c35fa861e9f14d9f34dcf84886f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 33.8MB
        • SHA256 314a378185865ee8f7224e678a8b74f314af745b77d2001c1ec40dfccb8ec133
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 31.7MB
        • SHA256 2de03a12b4ffca1a0279b3a535da2c5594dd023ac39d8b7ee1ce80c7b40c0ce4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 31.1MB
        • SHA256 55e8f1d1592cfd3383914b282b4f090f895719be02ce38e7242dd8fd97222667
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 29.5MB
        • SHA256 b9c39c30b6d12fe10c93d254bbf3b7fce2dc5ff987aa0c2944af66fd529126fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 28.3MB
        • SHA256 2c124ffcf21556c95e36f3e55e85fe491963ac6827f4f1aade6f744472ea533a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 27.8MB
        • SHA256 ecec8d7f0b2dc9b0b4525a1b381717a05f698f8aa585c8e440f664bea1667173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.5MB
        • SHA256 6be0070eadf3bda475da3108b50c57d62ff4444842ab2f0b7a864602c02ec225
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 27.0MB
        • SHA256 c3bd7d83729aea23b0353bf7b6d76a12cea5f85e69912714a048f360a66f37cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 26.7MB
        • SHA256 c66bc5a2c98242cd1e98ae705113f153969ea8f9a814dd3855e293919dcdb55f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 26.4MB
        • SHA256 804f53d3776373de92d54d98dafea3944e231ca93e02e176967f54bd0bb64b36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 26.2MB
        • SHA256 5b977a0bb6d92076600e5af9f4cee4878a8c1733e0d5edec574ecefaa91fa799
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 67.1MB
        • SHA256 beb5ef7a4df5764cbd283ee7f81fe6e927ededd600fabc95002e2b041c10e516
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 67.0MB
        • SHA256 cb32db7d50768613ca55cc5335a860b2f56022627d8e8ceb7013c8218f407b85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 67.0MB
        • SHA256 a35ae0c7ef505411f178e3fcb5bd0827dda22c1b14ad89642fed1ea21fadd9aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 61.3MB
        • SHA256 ddaa6ca9b45ea47cfcca90b064ad7671b8e6fab84031d1a7c19f52db7dffb10d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download