Overview

overview

8

Static

static

3

2026-08-10...ar.exe

windows10-2004-x64

8

2026-08-10...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 11:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_9f8ded66850f23c42877a996b792b0c7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 9.1MB
  • Sample260810-n3emcsxgla
  • SHA256 c05627f81f5829b0ddff13cce58d8581114dd807e3a6ad22d657ca57ceef9c38
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_9f8ded66850f23c42877a996b792b0c7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_9f8ded66850f23c42877a996b792b0c7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1628
  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_9f8ded66850f23c42877a996b792b0c7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-10_9f8ded66850f23c42877a996b792b0c7_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1248

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 9.4MB
        • SHA256 d85fb8b2d35249f48ef85132b9f4e34769665e222412b9f50efc6c410cbc860a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 18.3MB
        • SHA256 26a618d3afd5e888a7ae8c3f04378c99ba12c42f20e98116f8d44c36231ee8d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 22.3MB
        • SHA256 6117e01e8dee62e8b3ba619d376dacc4d1e3fc8bdd21385b9a9cf8d81f9667e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 18.6MB
        • SHA256 748be3580723045cd4450217f60011ebc03d0181a83abfc3c9e30a1f115ae685
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 41.7MB
        • SHA256 18f3b3606348a3b8384251a21b0743b2cc4c6c7ee511dd8494a9bd6c0b4d2a27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 11.2MB
        • SHA256 782380d85d593254c7016cab3d00642e83fbe6a6bfbc0cf6f1ded025c11f2741
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 18.3MB
        • SHA256 9c25015c6e43145900900cb80b73d61040a4714fd1a9374460df309b75a37b39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 24.3MB
        • SHA256 a846f2437c8a0f9e2cb05e73d237c6b094959d0106df91689da66eeaa7b71952
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 19.9MB
        • SHA256 7e4a3736ea70806dd76deb086b0af138b64a839b116481a369cd6b33386f3c9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 21.7MB
        • SHA256 a1d86eaad0e20dec007815cef8c5c35a5b2a910dc4a9152e3dad3ffc30832fac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 20.5MB
        • SHA256 c4354cc731f675a5c3b3e177a9da0a47371d45c9ce3e7cbc4ec8efeaa01298c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 19.9MB
        • SHA256 97a4ee7f182bdfe13663fe1f346db1a37c49031c66b25c3e8f5f823cb6b3ad49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 20.1MB
        • SHA256 23c0c4a64dbf95100b165400960ab6ed0d6b940b420bf99c5f7c94b8fd0e4b24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 21.3MB
        • SHA256 2ec2e7b7cb984e49bfdac9eb677b4962ac3216a28309ba41f776d45bdd83804d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 19.6MB
        • SHA256 a6fe2e1d8ee9af3bfbbaae1c6e5b988edf2c9016e5a01b32ded43c0fcca33161
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 18.2MB
        • SHA256 8b9a574eb378677ee2313f30b3ce68f5707a2295a0569a208d308eac86c34e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 18.2MB
        • SHA256 f234abe073095125bacaada58a687eb0f5568f0b95c64c54efb44f7e61ee1ad6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 18.2MB
        • SHA256 86774ca1f184cb12913d14cc8c56f85a56c4fb770aecd25d6bff58b7c540864b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 18.3MB
        • SHA256 16ad150d3c84f529010da610b0ce2cf451a32abe8df0443dbb4091684b0ba2b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 18.2MB
        • SHA256 a35e06fc103fe9ca623f44d965ed8ad6aba1dff1bf352675225142d403bedfab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 18.2MB
        • SHA256 481a1dcb86fe8ea2420da8cff0054fe310d6de1beed81b51d677c8331ba4b683
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 18.2MB
        • SHA256 58eaf1f0325b2fa38170acbc122e9e860a594e3c3f3244230b50b159268379fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 18.5MB
        • SHA256 f00c5aefaa9664776d2101a04fc11b42e1e68b8711f30ad1f1c20a4af004778d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 18.2MB
        • SHA256 5744e7777b9c5514cc98b01bde3f1ee46ab94f89afc6437222ab8f39722b7ff5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 18.2MB
        • SHA256 9d5c2ff29a2a7ff6ce18f0f2da1ffdce58cc83d8a03ea764e2a1181cc0ef9838
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 18.4MB
        • SHA256 ffbe8c27f3c23cf1e31ddcba00bea1f6b660953ca499bad87bafd33914dce173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 9.1MB
        • SHA256 e971e8365d7d435e9c5204072e5669a7ba4252105d1f777b3a134c5e3fb11b0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 18.4MB
        • SHA256 b744d8895aa74562806a768fe5edeb7fca851d1a166503ed457ae0d5d49bd3ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 18.5MB
        • SHA256 bd902dcfd049b4dbf4dc928bf44d0d7dff18e2357800bb4ee634195ed8ac1f35
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 18.7MB
        • SHA256 672fa66a2aa2a83a2d6dc6ac48f1dcf384836aefc72220de82abe62e7d8f54a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 18.2MB
        • SHA256 bb9294e9577bb2e35d677d0a4647bd289a2c9cc9415f7ca9e22e5fa47e4b43b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 18.2MB
        • SHA256 d79ba4feabb6eb7d73b159dccf59e2a8b9798e70baa80dd85a421bc73d9dfe7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 18.2MB
        • SHA256 bc926c2bae2ec56aa0f6d9a98926cd0e461dfb209e41a0b568469e23f2194ad2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 18.2MB
        • SHA256 3c4945d11d2764c5a4b9197f8b39f86f53381b99477b1b442eea6c5840c0aac6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 18.2MB
        • SHA256 1765bd4f19f257cde6c7d7a9c009dd2e9d9fcdc19256e1e34db3a2e3e7908966
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 18.2MB
        • SHA256 6cbcf04790e4215f49900b8b635514a532b2cfa7e2976ef62e3307f57a237534
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 18.2MB
        • SHA256 1cb4d8c0bbade358f8f775d01dfd0442ffa4ab843e37dcd174f0932d9a0e887f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 18.2MB
        • SHA256 3fd0061a64ecf40eca7a227c4745a2b113c3f7143ebd7161c5a2d6c0a09d6253
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 18.2MB
        • SHA256 558f01290c2c2e45ef92062f2e5ff26e1c3dc1ccfbf9fe28436ba91fe10ca2bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 18.2MB
        • SHA256 9d438aca54b238e2fd85ba070e46619493f68cd51faf5c4e4f1dd24e8fe0b819
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 18.2MB
        • SHA256 d858b11ac3556b7c500be600aa234b427177b5a1f4d83db11f3583c2d72e4713
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 18.2MB
        • SHA256 74921f09d505c1daef12710aa0fbffb147e332ccd8db71053776571c684f01f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 18.2MB
        • SHA256 d23bc5906fc6ec8dfa0117181c87ffcb2cdad55d2e30124eaf220aa280b6b39d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 18.2MB
        • SHA256 b8f6ecdd40ac2fac2e1f4f2faad93a4116b0c42477d6de3c8d3c538e96fc5a3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 18.2MB
        • SHA256 df4f8ddc899630c1761cc6a5afab9a23c9013352efe491773aca8c0410a03774
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 9.1MB
        • SHA256 37a0f37e51fe23b3ba0d11b415e3be0cdcabe1d4e3950742cfb929b60874dfdf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 18.2MB
        • SHA256 ee80a372fa129f5e3615ea1a5e347dbd5724c4b3f4c91e50f643c88940615022
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 18.2MB
        • SHA256 d7584c9d692c9b4f035568ff1205607c3ee5205a32e3c7ef35f4b37813dfed36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 18.2MB
        • SHA256 c0f053401fd62ce2cef2eaf5a538b7822b04fc34d00ba59f2a6b9d82b8de2385
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 18.2MB
        • SHA256 1253902c70f184d524d18133d4a4fc1e6b3ad27bac87b420571ab19e806dc5d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 18.2MB
        • SHA256 72ddee0226c1bfbc4919d4026f5ee2d30271033f5a088d1775bc3b8a56a0cad7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 18.2MB
        • SHA256 4faaf41dc665b1a0a32809e214112a7d89d34750b90e34f9675fb42d7deb1b8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 18.2MB
        • SHA256 82f3296eac55d9e7443a7785d847d5055a33551c479a3fa06cf2055263f27f54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 18.2MB
        • SHA256 ac0fd7e99ce599ac582bfc165e0f9c0e91cc9c07ae79f26280e14e793f7d739a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 18.2MB
        • SHA256 c2110e94fb4a9d08848984d75ef9504303a87e1b0cb894fb74d345264643efcc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 18.2MB
        • SHA256 4597c2a7cf3da875bb1c5988390ac5e5a3f217922c6dc631d0a7b693dee58fea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 18.2MB
        • SHA256 58d69e873f2db134a6af5693c0561fa801d95aca376b708faf33ea060ab3b3c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 18.2MB
        • SHA256 9fc8acfa58edd9b43b55c9bc9ea8b0d91877475224a23b4bc8292cf3e7abf0fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 18.3MB
        • SHA256 550496473583085aa9b7c7b67bf45457e36a17de08952e618ff5454eaef4aa9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 18.3MB
        • SHA256 4f1238c59fa46c2d2d6bac6fba841532cc7a02f3f1167833f4dcc88b397c1d58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download