Overview

overview

8

Static

static

3

2026-08-07...ed.exe

windows10-2004-x64

8

2026-08-07...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/08/2026, 00:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_becd62fbe20b3634a6dc1dca57b8d424_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 28.5MB
  • Sample260808-a3dheaep8w
  • SHA256 c4cc21f008757ba10d2136ecc55ecfb18157ad469cffa47af2ace05c2f9dc103
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_becd62fbe20b3634a6dc1dca57b8d424_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_becd62fbe20b3634a6dc1dca57b8d424_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4276
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_becd62fbe20b3634a6dc1dca57b8d424_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_becd62fbe20b3634a6dc1dca57b8d424_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3600

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 29.1MB
        • SHA256 cadd9095b9adbb194aec665efed944ebc8e8b274f90a4c8807ea845c9ce767f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 30.3MB
        • SHA256 65b3ffafbee9a42dec5057f21c739188e5e443e53d94bb675956c55963e58ac0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 31.5MB
        • SHA256 abf375ccacdfbd7db05193f14b254a4bded471fc08c250d8cfb42237feb2d594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 28.5MB
        • SHA256 1c7bdda923d858f1da38a54935c9462faaf221515ddc88c9d03403d6138d4211
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 28.5MB
        • SHA256 2fb73bab4a34fcead4fa93ab85a3d51e23cabbd7ea4220f15c523ddead9af14c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 28.5MB
        • SHA256 2fb4d326a093e64686bc2d4db027371c8f020a941f8535a0a024e930d62ee07b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 57.2MB
        • SHA256 5f2a0f9821e3772d4caf9081071e1d32d50c839ab2b03bdbb3b9850b249d6d54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 57.0MB
        • SHA256 42cdd92969145b52b48fe2617c783dbdeb63d789a5a3f604a001b4893cb7dedb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 57.0MB
        • SHA256 30872f98f77c9256b768d436a8ff422922fa8c11109ff9af0ecc6dd0e57b5ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 57.1MB
        • SHA256 5e7b764f8d5dfd9db7f2642ccfc07fc8f5d7baf6f92bfbe0037616815ed9fd2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 57.0MB
        • SHA256 a11e0930d2085370c39905e1ca18528743113e6c987b8bce50ededca5016a002
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 57.0MB
        • SHA256 e7b6641cfff8f2ca2b25d748c0f7ba4841a3e0dde2ce5817f15b8e9f56fe9c71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 57.0MB
        • SHA256 7a762cc2d130b94549e4937f842a79a0dbdd44ac3f42c3455782dbc9eab910df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 57.0MB
        • SHA256 bf61732d736d825aa70f17981c2f28b6c8eaeded91e4b0941d627ddea7e25b7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 57.0MB
        • SHA256 086c3b4e741f4be7480878bd6684a56820808d2e107663f9e8d5512b2a9e7bed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 57.0MB
        • SHA256 a215b0ab8239fb00fa45712118367a221489e215f61e49a09e83e5dd4a3939f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 57.0MB
        • SHA256 a86615082aba3b4db7c04fca3b8feca4aa67b295bcdda4c024893a1906d7628c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 57.0MB
        • SHA256 e27552c5cb944f507c50740620b399303397d87c3b3344a2efa834042881cece
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 57.0MB
        • SHA256 a73fc360cdb602d31c6a07a13c80f28ce08b7e3c6b2e570d75fe37d8cf02dc27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 57.0MB
        • SHA256 53a27bdd59fa760d8ab9b0b367da38b427e89940d117fbad53e827447ab422bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 57.0MB
        • SHA256 71a57efb93b4839e1d55c69a6bec2ed7430f5f25467c31160a6a0b9fa87fee15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 57.0MB
        • SHA256 e232b909c3f5c804068bc9ef966db3249eac904f9db66b1368ed38a6f1256b86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 57.0MB
        • SHA256 2fb9a8459cb7bbcb24794ae8f87d49ff568c2c9d30c5a2165451877938379dde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 57.0MB
        • SHA256 473d42b98576d79a127f9996ca115f4019df58cdba00a934195251bd256be313
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 57.0MB
        • SHA256 85605375eede036600cd8749225a83637b7fcad379f2a5a10b93e502b860fa8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 57.0MB
        • SHA256 1cf92090c209a041539faf384a084d377f893426661433694b2bea330d8effa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 57.0MB
        • SHA256 6bccde67b7486e1c3671a304ef737eefe00a0378aaba93bfaf9df3c868311751
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 57.0MB
        • SHA256 a3dea763304551b9f880b6192fbf363eabf3665c247b0fbafbb1c186cf5823a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 57.0MB
        • SHA256 7fca5fd23d1fa92e0c8f59db41109d43c5766748080d3d593d5c5734ef1ecf04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 57.0MB
        • SHA256 b02ecfacf2d3cd7558ecb9439f24038fd2e63aeaa41a443b0c286f01428478c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 57.0MB
        • SHA256 dd9d0e753a38c18c675cde998dbe061b4b74a973727ee10e6e4019a505491251
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 57.0MB
        • SHA256 2a77535bd932e396b11e88dc16f48d08d14afd31e9c1d540d34c6d320bb72d46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 57.0MB
        • SHA256 21d5964c5cc9a724d60d2e6f6ee5a28319cb6cdc4e99dff1e9ddb4e9ca5b4c7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 57.0MB
        • SHA256 5ee5b23ac9b641d1591da58094df688065cfc7a6c58f4c32651230b08e52630a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 57.0MB
        • SHA256 c7de303c5cbb004d1a345fd221c10424263b73dac5d0caca18b8099c842f59b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 57.0MB
        • SHA256 1539d40b98c1d3dfadfd04c724a03a4743dc535494a021efe118aab0b99bff28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 57.0MB
        • SHA256 f15b8a7f45f1d75a468199d216d659598e2adf8bd4152ed1883fb626042025af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 57.0MB
        • SHA256 a3a64bac51052c6101b191219b1d05d6d0826b63ff1f6bfce54b3e04fa7bf95b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 57.1MB
        • SHA256 4bc884328ffae46babcac74535c892453e3fc13b02388ddcc7ae94e90b87353c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 57.0MB
        • SHA256 e0decb3728a51804c607901faec87e5d42d25d01b7c30fdffa8a9717bde00360
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 28.5MB
        • SHA256 a9adb28f9b7eb645682637797044a3bad043568df7c1e6a04ea0b5819b0efdee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 5.9MB
        • SHA256 c7ca7a9b28bace21a8603dd609c66a6324bdcb62bc4ef1badbb067165aaf0896
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 5.8MB
        • SHA256 27fb42beb380e904eb75d7dd1fb57c918c24bbd1ac55c59b11474f213779a301
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 5.6MB
        • SHA256 fdde20b11ecd88227c57e5660b90225a392cdad72c1b97b47af3b0f1ba6f0f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 5.6MB
        • SHA256 6c96c6f194ced292457b1e8a05fdef758f0289c2b34aedbef72e7423716d7e43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 5.4MB
        • SHA256 38b27ea147f411b3d905b7a05e7a9815a5d87a95e7917f75782d985eebb28161
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 4.8MB
        • SHA256 1bdae5018191a9e5d16c71aea7dec32674758e87561589c190abc8e6ee473d26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 4.6MB
        • SHA256 41f351a8b71758389e923d6a04f5d5736dbd42a31b962dfea726c1a96ac029e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 4.5MB
        • SHA256 233757f3e745535166cbc7d9445affa63aeb491f8aab31acf881620b701cb3a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 4.4MB
        • SHA256 8a8b4061fee31ebf97231805f7bd86273f40c5e0443448387285d9773649b067
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 4.3MB
        • SHA256 9d1d0b72e9c7db412fd81aec524d4df7f6dbe3e37f9357f7f591c6c3f4872fa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 4.2MB
        • SHA256 88f7a228e55e3be4f60fa513d42dadff9e7b2ef8fa695093d67344c008f8c39a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 4.1MB
        • SHA256 d4d8ad1c07d0aec9daa28383234288c734ffb002567d4e98d86dd790f2654335
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 4.1MB
        • SHA256 b9265a05ec0ca3444594146d410fb37697caf6604da1639d11802eba0ad85326
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 28.5MB
        • SHA256 c4cc21f008757ba10d2136ecc55ecfb18157ad469cffa47af2ace05c2f9dc103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3600-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4276-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4276-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download