Overview

overview

8

Static

static

3

2026-08-07...ry.exe

windows10-2004-x64

8

2026-08-07...ry.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 01:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
  • Size 6.3MB
  • Sample260808-b2qa9afn2z
  • SHA256 3348c1b476323b19e0191bf4a4e17e352d95f512b4a752fcfea5c93724fd790c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2584
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_2e3bd78480e93b77e53695381eff0917_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 7.2MB
        • SHA256 ae01f20a4aa27e05e055b1c9c2d446c48917244e4d230e5049fc9af08a0e7c9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 7.0MB
        • SHA256 d5092230523b35df475d48291172844832ec4a1ec1595c23eb57bac9af98b72b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 12.9MB
        • SHA256 77e69be7f94525bb3383663ba8059b1daab8fbba7c44ccaff535f7415c0ac372
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 16.7MB
        • SHA256 302d3fea86507918cdb5443b9439b6796a40a859e48fbd6d3fe02b760843380d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 6.6MB
        • SHA256 44396241b91690562a32f7cfe72995f437a4178ff15c1d1ab5a51edd277726fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 6.3MB
        • SHA256 3348c1b476323b19e0191bf4a4e17e352d95f512b4a752fcfea5c93724fd790c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 18.6MB
        • SHA256 9efaff447721a54e18618789b47335f837511ba664aa028842c0984830ac5bda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 14.3MB
        • SHA256 027d924edd2f07c62b5227ef5752dc968acab5aa84355e510986c11374ce7a11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 16.0MB
        • SHA256 6fc483e86b5620eb86beb5e9801aa8c5f91eb863241307c3bef52b364dbbff98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 14.9MB
        • SHA256 6d00672971c32683d3f361eeeb32b7074938cc20b8bc1fed49e5ad67c04f535c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 14.2MB
        • SHA256 7541035c5a2661fdd14b5545a6c2e2f70bd03ed1efd6bbe9cdf676bee77c893d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 14.4MB
        • SHA256 5f912138f543779e0cbd438f6ed107b67d50b9c00f02fb4a950321ce08e216b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 15.7MB
        • SHA256 280b0c329e9d5c6ceb1b85fc22888b53c071b4badafb6bdc99e56a396a740e50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 14.0MB
        • SHA256 9b266b3d2f6fdad2ed9f6dcd79f1ce9ea1a3bc5081b19c5824115c711f96055a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 12.6MB
        • SHA256 a57c1edfea59fe38a489a9d2cf356a5792849a36a44ebe8f41acb6db59f92c9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 12.6MB
        • SHA256 ba5b7e1119aac0072e34678cdf5d24d800168d35aa68d2380ddef192510950fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 12.6MB
        • SHA256 ba572a90a392f35b98bda1a94902537aafdbd7cfc740a01b10ebaddd6cc5923c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 12.6MB
        • SHA256 4285fa27da497d86b3b58c8599e9fbce05e81399c2373ebbcaa7ec802ee5c22a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 12.6MB
        • SHA256 aa438a5224e6fea96592cf8480aeaa9726fb7d4c675dc3b97c710d0bbb8e4121
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 12.6MB
        • SHA256 da05bfb0b7c2a367a2c3b3a3b31ad9b0355d1b456a052731d37661e75de9d430
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 12.6MB
        • SHA256 ae52ea1560afe508af022b45125a95bcaf7cf7b22268561a252cfe4ecc093f8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 12.9MB
        • SHA256 6ea61b5bbaa86a6de1c4cda43d6f88c9cde3709d1215ac22582a52a660b1b41f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 12.6MB
        • SHA256 ffb1890e5ccd9627494615988a6fc6fe4baf5a7992a15010e663baded2177732
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 12.6MB
        • SHA256 165bdeb212944a0cd958f81942b5380b5a6455bb3c4983c146f0333bb9000dae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 12.7MB
        • SHA256 db03bf5f021eaf9c120cec367548d79a99056bf25d9b47d260d53a1924f103c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 12.6MB
        • SHA256 0e1aee9f51c58b141348eecbb9e3d3d75b891a4e219ac98173cf2019b3d9d954
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 12.6MB
        • SHA256 3b712e8fc36ae9294498fd1c30e69eb5856be82835cb930705a61af49e3dabcc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 12.7MB
        • SHA256 a13294a9b4a096e8ac7150ac57caaf69c40c694ae55777b70ee764b582a9727f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 12.9MB
        • SHA256 92b27cae3e57406f7310522722cb7394b3acd80b69dc79e63d9c011e8c13eca3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 13.0MB
        • SHA256 5c073f26398e43c64d5231e301fbf1fe3db1152f97f5d9a4ea8ec33230553527
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 12.6MB
        • SHA256 59af409427a1c22b25b4d919cbf0ee56b58b7525fbddff17334c282cbdc5cc12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 12.6MB
        • SHA256 afd00472bd3f354b3340f1ef37d09446123f913e36b66c7c46ef5517ce5095e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 12.6MB
        • SHA256 1e57b2a283b899a936e15f48344e1efc81c3280be9f15949e4ddbad629789e4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 12.6MB
        • SHA256 93fc0d3399ddf7a43756384055d5af082670f661c9e2b05a7923134b5f091721
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 12.6MB
        • SHA256 9d15d00e49df512694cb666c09a5d1bb828c23d56d212dab9602c2f005ca6f99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 12.6MB
        • SHA256 ab3d02924dfca44009d7441ed6068565e79eedeb31df47517414ed4b97dd3d39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 12.6MB
        • SHA256 a305e6ef795d1f1bbe761e6090a3e54b27114e14a385144848b3ca17e30fc26f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 12.6MB
        • SHA256 8605aab7af66e5b3a31921a1e1418d0d5b33acdebd6a76a7e14a400adabe6b98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 12.6MB
        • SHA256 8c1031785f467960bca2e755323f9b1178a4f55135a0254e84a75bcb4be7c6c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 12.6MB
        • SHA256 6100c0111731d16a33bc2a68c1434b79c36bebb701606b982c3bf097f737e221
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 12.6MB
        • SHA256 d2c892fd30ba8d9011c92c251c2ffc54c9a06f4dedbb149e724dd4f84e327624
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 12.6MB
        • SHA256 db9024a933a3c5e2aaa2a084f71ec9dbb464deb6d8fa56e526941266db85b45e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 12.6MB
        • SHA256 b0468413423b3b4bb8945f3de4abfd4863d8f5aa43266fbde60fcba112d0f6fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 12.6MB
        • SHA256 cb6d482a006be721eee30e68a2da23418e5e1753fef2aec96e878a0cddf71921
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 12.6MB
        • SHA256 ff2c336647f333e164f04619fedf3e2a1f1e83952105caab7171340ab897f7fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 12.6MB
        • SHA256 81031c8f67229e6a49adc327b6d4a7e396df3a4211fc00d174d68c61943864df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 12.6MB
        • SHA256 2319f086a9c3e294fd03f9d006d95dbbad982dfb520411a9439d15459824ee14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 12.6MB
        • SHA256 f2cd543b5c2941930e630c20e7dd36c9d52017b4015544380eb6325e665d4150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 12.6MB
        • SHA256 b1e181a62da6067f8efe98250db0755d028937725e280cceb7b9033ee1e295f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 12.6MB
        • SHA256 cb2cab3b800675a718da89182b42cad51d667c8cc1d32bcb083a7bef2cdc0735
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 12.6MB
        • SHA256 0ac3e5c76de372bbc9b6c22a4683fae5c6e96b4369781c21824ce9310682088e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 12.6MB
        • SHA256 913f7ace077497ba045531ba92a5f826fd5d625737908362ca7e9a3d6c726b47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 12.6MB
        • SHA256 79a1de2d0ae8377ae50f68f419a6cec2ef6d6bc0243961c3e32a1c21ea28e759
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 12.6MB
        • SHA256 98754621a341120fe21428d4776381c4f5e7b4b0f1d9ea0ca1212b4e1832f5a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 12.6MB
        • SHA256 72b424df7b7be6910f28d49f53d52c01657e530c424009d5185ee109600b1f54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 12.6MB
        • SHA256 6d48fefae20df0b583973a8456e5b8aa6cd6b301168971c3c5784c549e19f768
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 12.6MB
        • SHA256 747f2c59960f23aaa4d22fc382419885675c36ec042ef7985fef32fb0ffe1913
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 6.4MB
        • SHA256 7292a25259f6b4810ebf7c6478116a537cefdd0dca090b87bf01a6c52a9f19ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 12.6MB
        • SHA256 f815a9f7273fb57a793a15b2374920e507f77a90b3062ff50b8483e751b33a58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 12.7MB
        • SHA256 caea46d1fd2bb86d3b10a6780e38a5aca82e9adb17ba3903eb84c779e46bccce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 12.6MB
        • SHA256 36e911601b1263521923310af99d71b42cd07581d938eb5868710fa9da4e3c2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download