Overview

overview

8

Static

static

3

2026-08-07...ed.exe

windows10-2004-x64

8

2026-08-07...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    45s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 01:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_0d63ff6f3c8c9d299305eed1583c89d4_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 29.9MB
  • Sample260808-ccj9dafp7v
  • SHA256 e2632f584d6e375cf79c22c7c78199f161a1e244825e370787ebb59facd1fad0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_0d63ff6f3c8c9d299305eed1583c89d4_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_0d63ff6f3c8c9d299305eed1583c89d4_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5628
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_0d63ff6f3c8c9d299305eed1583c89d4_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_0d63ff6f3c8c9d299305eed1583c89d4_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4088

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 60.0MB
        • SHA256 37f774f0ef4642a8db45f0f710fd4b82e9b32f2015665941a433d1010b9bc9cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 59.8MB
        • SHA256 274ac6ff16d3aaa9a4d8f93250b26c24b615a2bde9d9f3f02d85ed397c4f751e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 60.1MB
        • SHA256 d12ab9021f92b44c8746a9f0495630f15ac6dcb209f78982d64e41cf3b9eda1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 59.9MB
        • SHA256 3ca9cdd54f3c1e5dfe269329d94f1dda773ee8cfa6dab222649e33c6f4f3d93a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 32.0MB
        • SHA256 39a7bef7672664ce9ca97f6b2ce6d863a2d5e45a5097b82232dcf370c53bcd85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 54.8MB
        • SHA256 cb70ecfc907147f9adb5715b4add8789c74e7af03492aad5c7846cc6facd32b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 42.1MB
        • SHA256 a8100488805793ba35e25d581a883a0099af5f9d6de37a9707c224528a0ee641
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 46.3MB
        • SHA256 eceff81e49f4dcd7d35dd20be26e4458032257194b99979adeb38ec4008109f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 51.7MB
        • SHA256 6c0e5cec1164743b5be26c94be2fe1ff959b2cd6c310d7b2d3ac55c1d33a3eeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 47.6MB
        • SHA256 a24a4176975c7ac1150d0fbdef3179f014431400768e1bc9823532a24bbdebbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 48.9MB
        • SHA256 979efe1919441290be0c5a408c3baf80aedd711b4aa22610e82c6f4742f0ca7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 44.8MB
        • SHA256 23d82ed8b503cd5b3490a038d3ac63cb136387e177877ba70cbb37e23a44a10a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 44.4MB
        • SHA256 9b890d55c3a0329950d964dc0cf30d7d01af820a1f2b843f5ac256b2c241c913
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 42.7MB
        • SHA256 a6f31593091f737983c9bbd1f5a5416a8ac7236920f6988c6cb88347256f4773
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 41.9MB
        • SHA256 597c39fdaa4856bcab29a0171cf0811ceabfd8cb2f77f406a73a9e7bf988b747
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 39.5MB
        • SHA256 c5b03c54e4b55c7c2a09d024093a3f231ee7d88a80817265bf492919d1ac70ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 39.2MB
        • SHA256 ec2111aac400e030050b0a49a8a9374095bd0c98aa0479bf9d7315ce1e750a40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 37.6MB
        • SHA256 93d0a1ed789a1c0ee51547a85cd78b9eb1f6b26324ee4f50a8b2b9c456e60add
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 34.2MB
        • SHA256 480d916181c63a7dd9fa5eda4cd04a56b5e2ab1c4978f8a042c8908235042e2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 32.4MB
        • SHA256 2d892eea1f1e96f8f7c93542380a000842ef658d7634dc020a3765f1cea7967e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 35.7MB
        • SHA256 5b8d67e38afe3c4188975ce5969f2fe8bd8fe1cc5ea1751e5b22895c9324808a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 34.1MB
        • SHA256 9919b309b6fd74d6528f6108b446ef5ae0901f70e4c5939af22286909a7564ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 34.2MB
        • SHA256 843316ce341f5a31464535278e6323d9adec63a459375b22e37b121a0bc00a72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 30.6MB
        • SHA256 a575c747bc8152a6c895c90a3604a0b1f04704451042fd0613a022beccb904e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 33.0MB
        • SHA256 0b8fbd307ad412bedf8712b2acf910a3321612fb6c206b87e8f17157e4435cca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 33.6MB
        • SHA256 aae51ca052f8039d8dd3e223194eca00ebe8317885028b6be8aa9415ff1558cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 29.7MB
        • SHA256 9fbad60a02173fea741ed0128850e0c94e2aa9a284fc65cfbf9a61fdd36aa6d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 33.1MB
        • SHA256 e7b10855b7463dfa57e9c91d806f7e56cef58079ef381bda23e6209af02d311d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.7MB
        • SHA256 dc04a51a09fafa48f3a29f6323eeb4ec2578736b52a164eadd4cbc1fb7a434a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 29.9MB
        • SHA256 586ca566b18f19b306aa93b99c076a1011c6494eca2bd6ebf7748782700123eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 34.1MB
        • SHA256 9b1af1b89cc4c0285161f2d6a3a24d9d2c1f34864fa3ce9061d5499620d06226
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 33.6MB
        • SHA256 7918df089eec3092677422f3f3783590d4425f7c1f6b3ffccfedfb201523a710
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 33.1MB
        • SHA256 3fab87e63ca7df966caa1422e5123ae5983a33dd44cdf3e7fa74b0a8fa97626d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 31.6MB
        • SHA256 5087a0088f71396f20aefd60bc18496862e0d434a682f1913b427b109aad0f41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 32.5MB
        • SHA256 309a20bc83cc53b0f4201ae3872b6f13d5da99ce2bb0bdfa3781ed6beb97d0d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 32.9MB
        • SHA256 e063de4171ac9871555f5082106baa8b02113b8431247fa6ecfe912343d86f0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 33.4MB
        • SHA256 8cb87cce3e11cf3b936f5ba2776cd44f949bb053fc33c8c4eaa837f569785a93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 32.9MB
        • SHA256 93b4aa2a4b6cff628d0e689a16d249452cc8438b2a166f5f9b8744dd8de53012
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 32.6MB
        • SHA256 35ad8b6ccaf8050c5e3dbbf7b60d0c36cd981c84ae75ca5d8f51b780920ef4e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 32.2MB
        • SHA256 7980803580e5c7954bffd2c750075c9d27b0fbccdcfd25386d22bd32601f2fef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 30.8MB
        • SHA256 b8cacb12f4adbe9851906de2263f856dc51ad843b9b43b989dc63b14dd4b700d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 31.4MB
        • SHA256 49cc64420b1952e50ef7b00e9838b1ded6123cbd5f78932a201d4c9569686086
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 32.1MB
        • SHA256 dd0f1df3893dae51f0c036d311851de0d9c5775e7fd09f68ea19846dfe9c0896
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 31.3MB
        • SHA256 efa2af2adc2780e8676e7104343b99ac708f6a7ed40dcfa5508db57688151329
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 33.8MB
        • SHA256 f1bc0a3da814438da38f32b5b46d93ea6b074099f607c97a2e979b9ddb36e09c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 28.2MB
        • SHA256 f99ec966df4f57fa6928e1837ab33369a8418b5475acaa815ce269010c432957
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 31.0MB
        • SHA256 899e09fa2201aee6df4d7f78994b6b3d0ac9b5ac5b8cd14e4849da2eaef16fab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 26.9MB
        • SHA256 32e97a9ca62892ad86d1ce465706dbbd31ab3d9ea900c2b6015d9755cf393f40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 52.3MB
        • SHA256 cdfdf890cabf95dc80228f4f6ceb973bc35d118e308b4dc4eea31d7210800bea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 53.5MB
        • SHA256 03487e15f9e717bc02822eb7236c9393e01b387e94b8373c442e0215b7be4de7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 48.8MB
        • SHA256 1bfab6b3d446f92982b1f42cf99290bb935a71a1856876a29aad0efa95b5fa3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 47.8MB
        • SHA256 2bb1156cf0945494918e3ec5e25540967104d005bfdea6c04ecd08ce708f78d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4088-15-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/5628-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/5628-3-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download