Overview

overview

8

Static

static

3

2026-08-10...d_.exe

windows10-2004-x64

8

2026-08-10...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 22:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 11.0MB
  • Sample260810-2kqtkaba62
  • SHA256 73d57b6ec69099309cb6eb8440fe21622deb9f23962aa4493a9d342cd4ebb4e8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3000
  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-10_4631f8f819e104c63f68aab20c3bca58_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5848

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 11.3MB
        • SHA256 b932dfbb645e78858c015882dc54344b8863c4626bbab0b371fda350a49ae0f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 22.0MB
        • SHA256 2231cb0382b7714737c8f66a6c1bb301860cfe892e3f397494c4b32252cb0165
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 22.3MB
        • SHA256 918239debd34cbf4ee796b6c1e0eaf386a8b736b5514c9b5dc945e0347afd172
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 34.5MB
        • SHA256 7e623025769b6c7c30ae167f8a5b02e55bdfb0975506810fa071b6981733a6ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 13.1MB
        • SHA256 68c4201d7a93a57b4066b4ee8293a0379dd81c9a3f7f7fc7b0c912b323779681
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 11.1MB
        • SHA256 a0974e4b7a367aaf85509dcbf4021bab3fd36e7c2407fc3c24560878166163c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugWrite.asp
        • Path C:\Program Files\DebugWrite.asp
        • Size 22.2MB
        • SHA256 8ce7bfb86c23bd5255d3e706d38b793cae3e8568969a4abed2c6cd2d7db963fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 28.0MB
        • SHA256 3d0b6889bd0860a7951e0de3db132135e8a7f0103a5a94e859e589e3aa76db43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 25.4MB
        • SHA256 5a2558fb6c0d55a51bc999813af1a5feaf79dd5e4fecb83069afbbe4351fa70f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 24.2MB
        • SHA256 9a3eb6f1752fec684d04ec118d389e7769f3be33a540c0078f403596e94e75e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 23.6MB
        • SHA256 dcf805af0b485a8ca9c97d969123d65ab230612c7e209ee6e92cd56fabe32553
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 23.8MB
        • SHA256 ac5f149fc3966c3f9cf30d7e3a6ad98091bb6357b5c754f5ef9cb43f2e7ecc56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 25.0MB
        • SHA256 929d53a56e4471608eea71313044b35f917946ae1284039b0742394e95605188
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 23.4MB
        • SHA256 b2a6f9fd825feffe47eba960d1199cdb97223931946b7f87ef61e0f6ad47f567
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 22.0MB
        • SHA256 38c840869abd02df833e3aaed8e3dde3d7a60c4aa227a9415944d3449e591f85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 11.0MB
        • SHA256 dfd4b5172e58cbf9ecba9dcda069dfedd15cc707c91facde01df389890745a01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 22.0MB
        • SHA256 4fac938bd5fdd7f3a2b8b4f2e8b18bc8fcdaa55e0216a11f7826fded6c81debb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 22.0MB
        • SHA256 2032d8e3bde7908a518d2b4f891509a377c0f40c4689cb70377c761172e281f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 22.0MB
        • SHA256 3565810a534225cb5f29aed9241217e08a79cd3ba6520003d908ce5e7e12149b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 22.0MB
        • SHA256 f3721139111ebe3bdaf4cd2848c21f12ef6ed67b990384654607dfc0fe09a4f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 22.0MB
        • SHA256 d3ca36925ddf172af685dce17dc366ed842704be90ccb2c4e7442d6d22eccea2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 22.3MB
        • SHA256 5aa399ce50d88eb71d3200b0b3a07107f56fa7a4031e791f41fd92869194a75e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 22.0MB
        • SHA256 3371f8e03706465f4bc94731f322c704eaa235ef3962c5f353449b3343aefed9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 22.0MB
        • SHA256 6dc800a2b3edc7ca8a38e6e792378281a5ed5c9844d650b7815cad71d65a52bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 22.1MB
        • SHA256 e93068517859c9c24efd9961ab717b139e25e53235cc425af404c3875a95d26f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 22.0MB
        • SHA256 12ba47ec2b0908308e34a2a2f0d4d924fa7bd63a6362e9e08ca13a5d20c30771
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 22.0MB
        • SHA256 80fb9a58eb57332da373e20bc5653391358e2d783911741fde270bf93f6093df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 22.1MB
        • SHA256 7618e5e3ad53fc1bcffdfeebbf5ac032fe56fa65d9fce1867a6b6d08d41c4d55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 22.3MB
        • SHA256 d6b464ede520099e58f757dae83ac298dd3a273b84354348fb755629475f30dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 22.4MB
        • SHA256 050f32e07787ec85abffaa74cdfa8144882d563aabc1cac46e4f2226b93c4182
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 22.0MB
        • SHA256 760161f6490c19ce4d1b30f48e7341f723283cc20077bd5b19c87ded1bf1da39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 22.0MB
        • SHA256 5669556c666503e87c32e77aa9487ef5f635bbf7a7125855c6e9e615b6f505de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 22.0MB
        • SHA256 b102076b429365f09e77b34047559c6ae1c0aff73d33be1a2cb81976a2f1c55e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 22.0MB
        • SHA256 4d7df7ad1d2a89287a62240efe5f1e39028ce0d777363c4ee8d8f1542a3ab939
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 22.0MB
        • SHA256 2414d3323bcda2ec0f81feb182e0a0e64c0824b5929935c8c1b10fe95d885f6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 22.0MB
        • SHA256 e14a65adb2bdcfea3ae04e4881a685477fb972c953dedfb2347949ea9fd45ae5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 22.0MB
        • SHA256 9176dcadaee5e28f7fe66f71e4f3ca990274b2c630bd4afd62c51fcf479d5f47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 22.0MB
        • SHA256 2863239340ec3d51f6767e6a181833763883a90815963ef0ad94895c5309313f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 22.0MB
        • SHA256 a50dce2bb7574ddbbaf0a356d1b86300459f9e8a7ff571003437cad90b4be317
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 22.0MB
        • SHA256 8a04a2fd9ed44347bb8b83b2a1418cf6f1979160cddf0f90d9e8414c31ed49a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 22.0MB
        • SHA256 ba6d11881ecbcf12d533755b0094d624f6195558df34654fa5f7f84351f1cc12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 22.0MB
        • SHA256 b2199245c85bd807eb9d30db3bb8c63e1d46415559e6f1e35ddadfa6aab17f38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 22.0MB
        • SHA256 813f370b551748fd6bf140db16e1ada2b5e960dba9a2f557d6f75cb15f67b1eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 22.0MB
        • SHA256 a34c529f0dbeeea6bea91cf77ade65408cb3e07849a0181a58b158c0cd82b996
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 22.0MB
        • SHA256 534501f84f347679353868bbd9865f71ccaffea033573066d2270e3b6b28959f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 22.0MB
        • SHA256 558f4d4db6ed142c14889ca6967c64deb481dbe4c9cba7ad28438cc2d88da6e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 22.0MB
        • SHA256 9f8f9e70363a3d57cbeb7c0d1debbb9b51a49aedfda48b0fdc228a3b9838694e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 22.0MB
        • SHA256 2b97c870493284c0a793d1fd3cbf7b2edb31b325f5e484c65b624c542bfa7ec6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 22.0MB
        • SHA256 764daca529881b659a21b6664730f6bfe453527f5d5a72011b7450928effd908
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 22.0MB
        • SHA256 7f2723e763f070d92648c4dd80e47f299a983baa0656e049ac8033e79d19be49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 22.0MB
        • SHA256 83af5a07472e7ace2ad77311af278e860ce159e97df43a4fd313064af1598e0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 22.0MB
        • SHA256 4be484a59844cdb00a9b523a4bec24b305e2ae19f9c7148211a2bfb87864956f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 22.0MB
        • SHA256 be934508931b8666c8ce088d961543b111c27c04006903e14e4f9de34aecb4a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 22.0MB
        • SHA256 e767a32692f1849df24d13fecd9aa94b951d1cfec7136b9c31d03a5931c1fcb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 22.0MB
        • SHA256 410fd438015374bfbfd3950b1dda5c552d5bccd23505a4edcbe2ad77042ebcb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 22.0MB
        • SHA256 210d093906ae2db3f727a6f0505a0359865b7cd17a532190026a7403be5f6b19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 22.0MB
        • SHA256 a090a68aa6d7dd269b9d85666d08d1408b72f29c053d4c52d5fddea011164998
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 22.0MB
        • SHA256 c5d5d5c71aa5de01cbbe9ca291866587503894f40dd5e126a8507e8358b4d3ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 22.0MB
        • SHA256 aba8ba592baf4029d8e856e34a80be2ee3194bd9186c6807a168bbd9e58c4261
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 22.2MB
        • SHA256 7d1fe6047139e11d876aa1037f50476165304de85065abca31a9df4a237ff6b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 11.0MB
        • SHA256 2e1f4d888f78fadf3ea310d33e3ed6fd28301d93b902c3e05db353f68b6c08b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 22.0MB
        • SHA256 2d05324e911e2787b434c7bf811b7a4140fde5b76dc04622d960ceeab13403af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 22.0MB
        • SHA256 4f0f26ab2d8f56796c7524a79d7d859771bf632cf93bee707ddd528600b7dbbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download