Overview

overview

8

Static

static

3

2026-08-07...d_.exe

windows10-2004-x64

8

2026-08-07...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    113s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 00:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_c02d35bf1411228012a4f4f21bc5ebb3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 37.4MB
  • Sample260808-a2vqasep7s
  • SHA256 15aab51dfd98b86b8b9b5c7d53d6e2be0e8825ae718866557387a61a684f3cfc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_c02d35bf1411228012a4f4f21bc5ebb3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_c02d35bf1411228012a4f4f21bc5ebb3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4128
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_c02d35bf1411228012a4f4f21bc5ebb3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_c02d35bf1411228012a4f4f21bc5ebb3_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5948

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 37.7MB
        • SHA256 cdc80505d4ff3bf8697224f9c224468f8dd17f1b9c82e0267730f85bbd2980c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 73.6MB
        • SHA256 89c4802fb9c4fc886203b3b0bee9200ad21c6286a1cc8e173f58d55b7a150426
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 69.9MB
        • SHA256 ff828a40d86a0701c30089e8b9b64d2b726775a6152093bc09d22494c4e35080
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 704KB
        • SHA256 d00fd9890e5b8b4ab20c6c689c78fd344e6f1bfc77541401e70ed34840570659
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 39.5MB
        • SHA256 acd96a8a571c905345a5e3da0014272ed3eebbf26e1e7a7f35bd54c691fa41e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 60.8MB
        • SHA256 beb9cc3531b5d347ba45d6a7e82ab03ce4aee48198d83a00d630f8d98c214e76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 45.6MB
        • SHA256 1025c63e1e11d22a13449d6914121595a43be8ccae11adf18f26e3c728df69bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 40.0MB
        • SHA256 f0216674c9db9352c412598574d9dbafa8ab29b64889badc5d85d24e45c46662
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 51.2MB
        • SHA256 ee0531c7b62dbb1ab43d13b6828bb240a5a519a454d9ca3efb867bc74390f3ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 50.8MB
        • SHA256 59343e5fb3146a1a4785c9d72b304b974c6a4c1be8c848b046eaddf086ea6dba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 46.2MB
        • SHA256 d5d293e6c9cf1a0c60b0ffbddcd02e98b074bcc854984a5016d7a61762d12833
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 42.0MB
        • SHA256 a33b9b9009b2bc0d971bfdb33d035cc60bc2548cd84d3b4d5a2626e9a5936004
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 43.9MB
        • SHA256 ca2f2751f91afb0a981d5af4a3e6d52ce2955634951bf5fb29ed3b23a1558b51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 42.8MB
        • SHA256 139a882eb7e61fb18ea076257af65373a4d8ce1c7a1db27a4cca809ffaa2cd87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 38.3MB
        • SHA256 7c40a0b7c134a439d338480d94f3c05c556d4106ebe367a89b7876471c68aef2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 39.4MB
        • SHA256 e92139b5c51b53aa5781fd4d134e35aa3b78d26b85af5d59e5642d89fa5e8c79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 42.4MB
        • SHA256 2c27f83ee809f9be7b68b6cf82bf481c4911e613cfe0f52d9e903d0f27b5323e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 38.7MB
        • SHA256 b4b183bdd7873ca1c4449070e51145642d3595b575382aca14b55fab2d8919eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 39.3MB
        • SHA256 f43871eca84f0db99c47b42a323bb7932376012659eeaa3302ff0e1129d3fef0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 39.0MB
        • SHA256 e82ef1374c3616e336622dd1df5bbfe098c77296966413cc164ade5b8cd38644
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 37.6MB
        • SHA256 0e1d8148b8b85c9ee957d263055376345c7dcd461915a4a173001cb2f87342db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 35.5MB
        • SHA256 86b8d37bc6309b7294a8875eb5d14f713ea774ff437b0cbda4c80de9cbb897d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 33.4MB
        • SHA256 c7960b7dd60e7b0c935470584b8d947327e430b3f068c9c8497c725b2c0958eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 34.2MB
        • SHA256 2349661d1d495df5ef1a8b3db0a5c3e2c5dc6b9b0eb240290c9fd88e22520c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 32.8MB
        • SHA256 696b2381891e431be4705558b19854d2447bd477b42f1290097f2701d9107729
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 34.1MB
        • SHA256 9faf965427bd92b964f30fe7320e59effa706af8e086de303b23555089afaa21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 33.3MB
        • SHA256 000fe2766de66407783566f8833a01b07f3fb83279a42ad008270153cbb53274
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 32.5MB
        • SHA256 b8cd885c24c8eb74460cbaa2c5909345608e4517f239c595fc2432b262d12d2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 31.0MB
        • SHA256 a35acdd66ba94ff16570ceed6bf19a29619168459b76634278bae196826f94e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 32.0MB
        • SHA256 8bc882617ce28e2ce545dab633eb0113bf2d81a6db1810dec3b35138774eb183
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 29.9MB
        • SHA256 7d05d0e1db7684e8fea4bae1052fa9cb50b1ad6b7b06b836f7b5682cf964190f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 30.8MB
        • SHA256 3074fb5a2ed638aad08c0a6716a9ebfbdafa0875f3f58c9500ee6647b68b6893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 31.1MB
        • SHA256 c272102c27b1cd293bdb68930da72da5fb288cdd056ba25b3261895373a648e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 31.2MB
        • SHA256 b3e4b4c5b9cc0fff3ba21165f0a776d0197e3f4f5f360620e505dd18122ec003
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 29.2MB
        • SHA256 858aa69e96987e0fc221fcb72a1a95c539575feaad8e3708fd2fb2e88b9577e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 28.8MB
        • SHA256 132878a65e678f156df936e0468b2d21a8ab82292701298e5dd6c14b2928812d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 28.1MB
        • SHA256 5eb21be729a93ef1e3e23d4413666ac6a544126bb284a61c280b65422ecae79e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 26.4MB
        • SHA256 3dc2ff71e0340dcda581a15c2ad37a0bcf8adcc1deed0c01e4ad9960be5d2a8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 26.1MB
        • SHA256 0673304a59820b9a9698ee487b3bb7e811655eb193ae74a0ddaaf1082c73e066
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 25.1MB
        • SHA256 659faef4ccaedd90c89b5f0e60166e26eeb1e99d3b9c530695f546a5f1c254fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 25.1MB
        • SHA256 374c867102088d1d74de5107023bff6228e9da6aad88393aec19855ddb7cbb85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 24.8MB
        • SHA256 6ef1f171d64265b05e5d41c46bd572381802aa0d1b03d5aef39edbd88aaa8823
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 24.4MB
        • SHA256 465f5b9e3d75b7511e7621e2e90aa5a19b1f29e378351785bfff44098e2b8297
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 22.5MB
        • SHA256 51ab0429da2e17abaaf65d59335b4dc956b074d2df3cbb3abc857ac572808b8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 22.4MB
        • SHA256 bdd65fbdda68948100d8394854904dded38d7ba984c03de7fdac140d8571777d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 22.1MB
        • SHA256 42dd605271a43cafefc4344aac32505d32e16db3cf482d74017654a890973e0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 22.3MB
        • SHA256 eccbc52452f2131bb71894968603325decf70de606fe9c529266cf266a7285b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 22.6MB
        • SHA256 8b8d3252255d01d4a1aaee719a50df91099600c31c1fc45b6ba7231f2dd16f10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 21.9MB
        • SHA256 e7a288cb9e16eace9743b566ee566a442771711dc74c54ea2c3f0fe91b9a77dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 21.3MB
        • SHA256 f4a444c880f171853b207bd1dec65431abf83e833199c80911b38abfb478a777
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 14.1MB
        • SHA256 a795aad84f2677bae7f6fe46aba8bdb7c004e6f94a3f82bd79a8c9b29240e893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 15.2MB
        • SHA256 d0a13825b48da60aa194838c71fd15357e2b4357551d1128e65c1426b94bf138
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 15.0MB
        • SHA256 79e69c05beca71e7a3094aa8e3f59b09dae3d3e23906f83d94797b338eaa878f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 15.7MB
        • SHA256 2c69ba91232c1fbf57c11a962f20292f6342a1fd46ffa194569555fd0f15b6e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 16.0MB
        • SHA256 7206834654065f7a732c1c6eadb8cb04d4686cadc15bb8779eb9a26bb9171b90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 57.8MB
        • SHA256 027bf84035c6971ed9088c32fdda0aec91481b4176826a9a7527a69defb823d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 56.2MB
        • SHA256 de2d51518245f29cb30628b817e8fc2409cecf7435f9a9011a50b2fd0b080ac9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 54.6MB
        • SHA256 ef1d0787aa67e213b0fc476499b0457179dadb2edda41317ea0d6c149e61b494
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 50.6MB
        • SHA256 44c5048a49ab4c345c841226d1119127ecc83dbe2b5e43e22883dd68e3d73f6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download