Overview

overview

8

Static

static

3

2026-08-04...d_.exe

windows10-2004-x64

8

2026-08-04...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 15:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 18.2MB
  • Sample260804-sp43batbmc
  • SHA256 17df8ed361bc93d7b14b85c54303d35d8c63e6c7d76c391eab6df4f182d8b733
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3696
  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-04_77f2e613c6cba805a6c3be3caedb759e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4756

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 18.9MB
        • SHA256 d396cd26d7796423e986c79a93f4aaf59cdab01f487f3767d4bd3f78c0cc6bb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 36.7MB
        • SHA256 d247bb0c8b0f956ed17f8a34edb6bde062702069f9234e0d5f31514e30802867
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 36.4MB
        • SHA256 368460081d9729c6b8a959c837fa558544b55ad5c5a15f63a5aec6cc6d316ade
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 40.5MB
        • SHA256 46546c14c64564fbc4376806ee541c684965c3f0d5dccc593d7a7f0c502322ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 36.7MB
        • SHA256 7af89c88e62edfb3742721b514fca7708083bcb3a7e4549e84381903fe2c7cba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 59.8MB
        • SHA256 a5a015a1fb6960a9b1c567076f04adc746f9a90bd06e5ac6a1e50ea4616db159
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 36.5MB
        • SHA256 36366e4f646ca4b14069063f4d449c3382f71efac63672c23e2adcd62364f940
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 42.4MB
        • SHA256 434e7323b9a89c8ddf25444b32a223e7f1fe555f42971273d3314d3dc816da22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 38.1MB
        • SHA256 feaaa87272288644a7bb69cc74ca3ad927c5e1ffe6e48116739abb68c699c366
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 38.6MB
        • SHA256 29a5d758bf669995d3c36f37db9377895e190f2895db472df361678204310980
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 38.0MB
        • SHA256 ed541fea4411f5cb6f9fa7c8b5b4a9172e1e6f966e75b2e974d9bec4a2089a56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 39.4MB
        • SHA256 5e4b2e9c4457f2ac19d6a68343209390da504f27fa95e4a9d9099b3b94d1a7ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 37.8MB
        • SHA256 576ae25086055c6ef5980f5be42002fa03fd72f5ed9201d5aa79e02d48c93e12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 36.4MB
        • SHA256 b5e15a4facc37a2a998813efc614a97f49a28087ef501e91a9c375700e836946
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 36.4MB
        • SHA256 aa2f3b42ff4c086f207577663352161da5d79f845a1c79af84763725a06a78d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 36.4MB
        • SHA256 901bd1fa0eba5ed0e8c9b3946d1994fbe78658d59c5e39acb3d35ef785815437
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 36.4MB
        • SHA256 1e9af8044b27fc1102094f79ea463f54edb9f120de7ecdbfb35f9ecd470027ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 36.4MB
        • SHA256 4397c2584712b3efdd9625e540b0245c8d5e56b556c274ff24362d80b194b188
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 36.4MB
        • SHA256 28866f980962f4249815a97cbd7a527cef314591829770215a71a1210414659e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 36.4MB
        • SHA256 b9b169310b5ceb83d6e01547f022391d7904bc4cd165ef3e99595b0508684820
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 36.4MB
        • SHA256 03c31dabc0126d1d70147dc0e1ea82045d21974c767eb63952369f86ee487132
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 36.4MB
        • SHA256 388921171f168a8182cd0778697a5e5ae494f3ab31f558b61c2e0edbf460fbb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 36.4MB
        • SHA256 c2d642e26060d0ad9ea4c2a236ec57e1adc8c29a02cedfb158d64b5cd0548faa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 36.4MB
        • SHA256 ac84d116c77705cd23c9bc816e727dec96ff8d06f9ca3c30ed5749ad36c141f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 36.4MB
        • SHA256 6d1cb82214a82292c14e059960d3d03708907d3e013092586ba885a73f827465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 36.4MB
        • SHA256 d89914523514f37964a3445a6651f3d32c7781c46e2f46d5914e4598e47e6756
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 36.4MB
        • SHA256 fc960402eae55d5fd314f4ae0dc0a21666bbb09fcc82fd8d454b84876670d8fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 36.4MB
        • SHA256 70574b73cb076def25c88eecf88aa32e795b5897cb02df177468bfe3ae4b9b50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 36.4MB
        • SHA256 274f7e2fcbcdff9435fdef36a38a5570c112307fb95260c437825b038ff29200
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 36.4MB
        • SHA256 1b623a608e348f0f65f619c03e8d062b72e015421a65114f06237cea7097f357
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 36.4MB
        • SHA256 b429287f63e569e60312d0ea1f6bf390770a571b30b17e69b436d775dc283d76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 36.4MB
        • SHA256 58845dbf1701d4d203d964c2282d31f01ddda6eaedb57063d9f0c3ea57aaf14e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 36.4MB
        • SHA256 0887bda77880dc702ce42d78c335b0c1b60d5d2bbd79ba623fc61366c840a289
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 36.4MB
        • SHA256 7d7c8bebd41c941c0c3db3e237012f235c29aec4ef8e438f9228aa9130553f34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 36.4MB
        • SHA256 1b14c2b329c0fcaedc20a7589a71cb101c21c6778e3283efaaf292a664ed42f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 36.4MB
        • SHA256 42dcefd6439e28ffb4bdf2363bfb433ea98fa45ac8771d945b2ecfbd77a62ead
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 36.4MB
        • SHA256 e9ffd335ae113a1615115dd50a7e7bcc614fe1d85f835b4182019857cd88a664
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 36.4MB
        • SHA256 bdb96a767113746edf08567e055e7cb563c1e8c0fd3ce43d5726e52b2a2f8061
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 36.4MB
        • SHA256 eb9920f2b217dc90d1cfd03ee893dfb5fef0c0dee4992d30aa065e48a195bc11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 36.4MB
        • SHA256 3ccb71c77d90fd7a37372dde0cc83d621d6e75e563be339d594890ac778060ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 36.4MB
        • SHA256 fe5ead2e1c836cf6b693cc6643e3415fa86b111c14af97281750fb305570b5bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 36.5MB
        • SHA256 d706303184ada96c2af4e85aac39fbddab0c7a67c0ebb6af6013ea7536ce8813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 36.4MB
        • SHA256 6b9744b43a7d82359f8fbde158433e4690a678561c010924d34788f68a6133dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 36.4MB
        • SHA256 e9911bdd84e0d4a60c133c9a339611c1c681dfdc1e57f374726531edf2c2181a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 36.4MB
        • SHA256 7ce1c829d1fa541bba25ad8a84333f9dfd3cd489eafcfa226ce68c55ba27c2e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 18.2MB
        • SHA256 17df8ed361bc93d7b14b85c54303d35d8c63e6c7d76c391eab6df4f182d8b733
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download