Overview

overview

8

Static

static

3

2026-08-07...ca.exe

windows10-2004-x64

8

2026-08-07...ca.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    60s
  • max time network
    136s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 00:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_f8f4f0b2f70a496089eb1e25fa4b6a8e_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
  • Size 40.0MB
  • Sample260808-apvvjaem2s
  • SHA256 bd1b0fce052bb42d6d754e5f69972e6598e0a57fe9a61f2331d295766752174f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_f8f4f0b2f70a496089eb1e25fa4b6a8e_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_f8f4f0b2f70a496089eb1e25fa4b6a8e_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3992
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_f8f4f0b2f70a496089eb1e25fa4b6a8e_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_f8f4f0b2f70a496089eb1e25fa4b6a8e_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2592

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 42.1MB
        • SHA256 3ecbb4155e9cd657a016d5bcab63dbd59b34eb6c52e1692865f8b5be810ead96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 41.9MB
        • SHA256 3b633aa8bb1b57a44c949c76a7d7156d757850c1e6c2a150c72a6218cd3941ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 40.0MB
        • SHA256 bd1b0fce052bb42d6d754e5f69972e6598e0a57fe9a61f2331d295766752174f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 54.2MB
        • SHA256 458a7c08c62f1bd44e7231b3ccc8346cd412c68592734551cb753fcb0fd144e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 53.4MB
        • SHA256 28c233efe4228b520eabcb7a50672fe6466655d0feedd2417e77c7c9bd78df42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 51.8MB
        • SHA256 7426cd8c8a9a8cee7f415e20b4a8d34c2a3ca727c396bded60c55b725fd3b4ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 50.6MB
        • SHA256 1a1b30a2b47818ac2d39fe744e0de0552304f1a456c0dc7df75a29c24226a614
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 49.2MB
        • SHA256 47d84424d78e791e37eb79a947a7328014d7488310522748c1f744c1b225fd1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 49.0MB
        • SHA256 6381f43299ad5dc519f0de9e12bc14f043fa05d3f477cc94a945a729477edb8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 48.4MB
        • SHA256 867ea8e34fcf778b34ff9fd99715f8a59897a752ada14b5c2abd214f5e3b1a2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 47.8MB
        • SHA256 8098798a4cab1d944a9c2f715be4004ce8d91409e936bcef81694fd30609b5a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 48.1MB
        • SHA256 7b33dbc6e3e491bba2ef9e49a355914b315ab612dcb80fac71d56fd6a115a434
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 42.5MB
        • SHA256 be8138319e602334a4e9efb993d177f553748f2c07954e909a6809aaca88a973
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 39.6MB
        • SHA256 c5af814bee20a9d56b4824f365e3a252e00e4524a606a2c3b785543a04985f61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 41.5MB
        • SHA256 64e8923c86a0ffb11ac70abb3d1e841ccf66b198556bd7b0e4541ee2a43f0b6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 41.6MB
        • SHA256 60fa31da62e5b92cb2ac031cd2cc0fa5cdd5dbd3588679fca1c71daa08ce81fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 37.0MB
        • SHA256 348ae19a23fc393fd6464727cc53638adc7923fd7b55fd263e053d9ef5f5b409
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 39.8MB
        • SHA256 368049aabc62169ef9ab32cfe53fd6075d9ea8d06030093f50fe315f40c24451
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 35.6MB
        • SHA256 41f135ef82499d32c2b88062db0de73cb02b8d05906c13d1cf5d9fac1b3b211f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 39.4MB
        • SHA256 4ff9416c545e6ad57b90cb3a204ea30f660402250b7546fe7379119c8acbd4b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 38.0MB
        • SHA256 4bdddc8d2c15310938c1d5ad6a31fa6310b7aef21057c888d03e0e5143f669b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 36.9MB
        • SHA256 38d048305b8d88be000068b4dfe1d15d4825c87d1ab57f4a5bf287c0b8f793a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 38.5MB
        • SHA256 605fd53c85ac557b02a01e0b18357eb0746f9702ce858521094b20fc06942a75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 36.2MB
        • SHA256 55aa901d5d52ca6b22aaa45111e11134e745a69301fb7e4640271dcfedac8f40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 37.8MB
        • SHA256 267f3688aa597d1677984488b4be37867a85b1127730ca9c9da0643f0f435973
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 30.3MB
        • SHA256 139115a58bee6cae2a2d7279a99d61a5410de3b7e1b039deb9991bb4f15553a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 33.7MB
        • SHA256 0081ff09c208493bb76832cb91598f5a6be8bdef0d5f826b1da30d78eecaa2d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 35.8MB
        • SHA256 bdc9d6d6affa510626227d4e59ca9b4fe1163476024bf462b4f7e2fa40aada61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 35.6MB
        • SHA256 a72d0908a08dbf3a618267f2740aa1156b2b1f50d5192021a51c54af4b539e15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 34.9MB
        • SHA256 7483de636a704b0fb49a1ed4f8738d33874659203ac1dec929e8354d698c921e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 34.5MB
        • SHA256 816a09af5142c1e1f2fba91a1d3bf5f1ce6c0179187476d0f4f75b318d0cbdca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 30.8MB
        • SHA256 a999761cb410e13533d62b6bbb83456a4018caffc5f1164e6f3b6a216e02c4c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 28.7MB
        • SHA256 d8959aea20865ba8af37861ba66eeafb45a4677cd72316648bfd22fb74b16b73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 23.7MB
        • SHA256 5de1481f64b1692f7631b270bfb3b0f4f9daf725da023915687fe11049e56be0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 29.6MB
        • SHA256 54f42626aef6fb2d2d8fbc1e450f5abdeae9f96f1805a5ccbc315cbbbe8c2a50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 25.8MB
        • SHA256 27909bf6b7cdba19304fd07553f31529c0fb525bb86a55953ead31298113ce8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 29.2MB
        • SHA256 f8133353e0c44abc18a60c99b88cd5a8f7e592e8e248df46f7325c525e82d8a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 21.9MB
        • SHA256 64d036ee14ea2e2b0e91b216af0add9ac35a0b41cd469f955f5b9b76e4b31440
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 28.3MB
        • SHA256 4403812e96b0590b6f671f124a0e08507ad595daadb7c40c15bdbe3b9aa36763
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 24.7MB
        • SHA256 038988deea8baa4dc9d5425d0a85b6111075ebeb819dc5aff0857fd7b768047c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 26.8MB
        • SHA256 e4d9223a27f1a060e5db491eceee7078382e0a09d443df0464ced06737e9c419
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 26.7MB
        • SHA256 f76b25c9d7bd45a20dd43e20d1a71acadc0e95d9ed707a95437b78ada7501e4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 26.3MB
        • SHA256 e8cf53cc0b755aece31d5d3cd88721c82b8b6ca3cdfb96cdaaaaeefc5bd69bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 25.1MB
        • SHA256 927c612cb97b5fcca52fc5a3cfb556874ce82f1f871dd796e2cb886d911587b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 24.6MB
        • SHA256 b0d010084fa8f57eb8001c60f14a49102d6cb30a2a4961e54e43ece1b199f620
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 20.0MB
        • SHA256 526085e6618e86369cb0075c93d236bd8d76161f6f8288b351c68bcfc2281e64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 22.8MB
        • SHA256 956dc84038bdfc0e10e7cc74a8182f6254c1a2d60f261de71fb78719f93056c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 23.1MB
        • SHA256 46212f28aae8702329e3b553ad9e4badfc73591b026f40c1b2ae02f5ecc22391
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 22.8MB
        • SHA256 c1931065fbee04cfd5739d5a8a78dc63666668f1b007699770b506380e1f8826
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 22.9MB
        • SHA256 ac381339c5ca46d9faf726d31de8948a1d88c54a1d3ea91197ec94cd635c2c38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 22.6MB
        • SHA256 123f4721fc81fc33e46a78d302a680d626202211479c91c2ef6dc0a87ca5bae5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 19.6MB
        • SHA256 c80a6c0fd4d924ec07bbb27a3a4e904373d3b4f1cc6f1eb421f06cea5bad83e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 15.6MB
        • SHA256 b184b88b243d7dfdb75d29043d0f074ab36271c2ef414a3fc8c5aeafaa2eaae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 21.6MB
        • SHA256 bb0ed9c32c2b285215c8f7ad315951f0b7e43ad2f848ea89d728c4696e3f936e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 17.8MB
        • SHA256 3c2160fe3f95f86870c3f9918f15eed985cbaa8b5aff840514b45cb076ea5a16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 20.4MB
        • SHA256 f3a277c2d2e13df2d9ef3c524f4a4284a620e215659a0f3722f502e23cea3d42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 20.2MB
        • SHA256 28d1006a216d8601bbb5a208d7e5e7bdbf19bf260c5592eb1c1501654429c6f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 16.8MB
        • SHA256 d0944f4cbb7cb9e2423d802abb4193ecef0606afe33979da25cafa4ea2da5de4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 16.8MB
        • SHA256 d9e7654c8dcad554de7afa02712923d3b7e4f3ba4a47211f9b3bd77cd7c8c7f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 40.1MB
        • SHA256 47cc3303db185acccd198f0b54c9ff96fa39105f088f104c37b48e8b02165add
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2592-9-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3992-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3992-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download