Overview

overview

8

Static

static

3

2026-08-10...ar.exe

windows10-2004-x64

8

2026-08-10...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    111s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/08/2026, 06:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_980616a7627b476b384a285afa5d4f0f_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
  • Size 44.9MB
  • Sample260810-gsj1rssdpc
  • SHA256 181e3b676e9e3830c01135f1daa6b640bb38f15cdefda9494fccea01f0aeadc6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_980616a7627b476b384a285afa5d4f0f_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_980616a7627b476b384a285afa5d4f0f_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2016
  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_980616a7627b476b384a285afa5d4f0f_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-10_980616a7627b476b384a285afa5d4f0f_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4656

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 45.6MB
        • SHA256 60e5c3aadc48d4ee9d703de18c48bc28f9e62951ace9409a53099049cd9ff3c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 46.6MB
        • SHA256 a5e3b182bda60be59c05aed75a3c12de8efadd621cea33f0d48976a60e29e639
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 91.4MB
        • SHA256 241c15b6b977efe6d1cadc0876eac808a885842c17e26ed2f20ab1dcfb18c0c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 91.7MB
        • SHA256 a4da620614dbe5bbbaf8d61177b88cc9b1ea3805c3f19c3230a8451e7f02f295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 92.9MB
        • SHA256 e10e73096c0eb4b266a80843c5596370430cc2e0747471461dcca7a70ff3eae3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 91.2MB
        • SHA256 eb2b39650864e8ced189d7509948ffa040dfec909d1c4185196903037a9f3aee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 89.8MB
        • SHA256 b0e4529d24ab893007903bea0433a6f08d19746e0f3776873d945367be1407d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 89.8MB
        • SHA256 b7ec0aafc9a852c5815f2396af98c3077bff35e30aea403ff27f4ac8bd0150e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 88.4MB
        • SHA256 90987372dd99b3f8df94ad837885ecdc38e88736b9cbb6804e9dec5ab86b80aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 84.8MB
        • SHA256 7182456eabeb494b6d24cd5c4340a36d87c6d41e0a36eaf1f67f8d560db441e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 84.1MB
        • SHA256 df284114d5b484a3932b47f5feea9f2b0d1e0e9b1667775cc1f18b336c1e2169
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 69.7MB
        • SHA256 b8ce5139222431a0ec7326248a03e8f1d3d53984303b97436659c38ed41a43e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 62.3MB
        • SHA256 7e2cc8d0680cbabf604d72afe460d2bf4e8b6309034107bd371087ffdcc1b752
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 44.2MB
        • SHA256 cc646fcc8b4a0394c1952a2f1d115f56564309af92c789ce7a6fc1431ab2ce1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 29.4MB
        • SHA256 f4fe4af373ccdc07d327e1352380aa44f094173dc8a188040a783e415ac38efb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 32.2MB
        • SHA256 b65f73aac8191134963e621df967561ffdf63f5f2136f3d5f535b310658fc981
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 31.9MB
        • SHA256 67bf33409992037bd4e6b43bf6f3b0e132e223a91e5078103396fb25676a3568
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 31.7MB
        • SHA256 5ccf65e36de39e50dfa06970e952b7c493bdafeafce808fa26b143eb031c2bfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 30.0MB
        • SHA256 a28fe553b4c73af5a978dd7f9a27a3294350e8f3732703a72a606c2ee53e3232
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 28.9MB
        • SHA256 b4afed34f894736ad1ecfb643a27b14f5ecc05ee23f1d95bc320ace464f3a297
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 29.2MB
        • SHA256 a9efed3cddaff12b99761a667a149b929ea462165ec57d7dfa34a951196c9ed3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 64KB
        • SHA256 561e710c0f12a9ecf3c544ad6eaf227983f3f3f2dcce0bb2f803afccc641ad14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 28.1MB
        • SHA256 fed16dfe653495f17c28609e718d682dc40d439c9dc5b1434e85ab971a9a0d9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 27.6MB
        • SHA256 59d2a7d6853213a906f47fe183882b0143ce443ef026953de4c3a9da3523f823
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 27.2MB
        • SHA256 d1d6a888a03c4fa4ca3cb2285095f72db077740add6236484e8fd17f078ddd8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 26.9MB
        • SHA256 5a7e7420d0a56fdb77ddbfd2dd640f510e826ffd0a7016ccd851334d60154ac5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 25.8MB
        • SHA256 73fb91d72c0f52f9900e333801e2942e55e0bd3e88fdf35b216495fd94c8d793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 21.4MB
        • SHA256 34d7fedec0c89b1a9048de2e06fab01c23adbabf636314b38486222df2293cd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 24.8MB
        • SHA256 7d53154ca3c9892d36232d149e8a48e5157dc6e23fea161232fa866637bd0c29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 24.2MB
        • SHA256 2337fe0df8aa7c06b61f3c6c346d7e10f2928e0ac44cf4ed56f9101d9737baa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 23.7MB
        • SHA256 965a26c6514ca37be72c75d89cce334fbb52b91eb7fa5d3b18ca47e5e4ca321e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 22.2MB
        • SHA256 c8f23f6f8dcf9f88e31cb0c254edbb08b452b1a2e68e47de2cca70667403deba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 21.9MB
        • SHA256 85238df2f4c9880826c563d3864c835bd7ec8f98fb73cd2d26a4db37277f4bc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 21.5MB
        • SHA256 134f652be5c43d315ee3e7a942f131bfe52d94a77ec234c986fb56b23ac9acce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 21.1MB
        • SHA256 51600a4497397c4a05a2bd45968946ffe602fc59760885cf7effb1c0010377f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 20.9MB
        • SHA256 17e16602596a86babf35327561c283359f39c245848a98acf26dd25f09b6372f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 20.0MB
        • SHA256 7d7afb249e4fb012f824150572a4a896ea7b0991bc8caaa64f924948700a173a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 19.7MB
        • SHA256 0af2291b98ce17ede00923f4086c91a657a4e8a33457ac9b39f5626d51390b8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 44.9MB
        • SHA256 181e3b676e9e3830c01135f1daa6b640bb38f15cdefda9494fccea01f0aeadc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download