Overview

overview

8

Static

static

3

2026-08-11...ar.exe

windows10-2004-x64

8

2026-08-11...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/08/2026, 20:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-11_5533d6ce80d0c05598e7a66b6c15789e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 11.8MB
  • Sample260811-zpyc4adj21
  • SHA256 7ff642e695db38b72809d265161549fc638f462d36f6869c6ca0ff17b5a31e9f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-11_5533d6ce80d0c05598e7a66b6c15789e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-11_5533d6ce80d0c05598e7a66b6c15789e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4692
  • C:\Users\Admin\AppData\Local\Temp\2026-08-11_5533d6ce80d0c05598e7a66b6c15789e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-11_5533d6ce80d0c05598e7a66b6c15789e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4612

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 12.3MB
        • SHA256 9737c633fe95ad16211b1d33b8c50ecec2dc4185b9b97605d580a5fdb29a68c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 12.4MB
        • SHA256 b9a5b3a4a83d403b35bb57c2d8dc4fbc1d25df85dd193661fb371bc764b97fe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 13.6MB
        • SHA256 0ff9f13a49198dcac274d72300345dc68b7f895aea7a8e4c27ee3f7f1bee56c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 11.8MB
        • SHA256 7b31d14c343bc81e2ce36a49bb8c4ed94e4938f7efe6c76aef02f353f5933517
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 23.5MB
        • SHA256 e80a36a50f528dcc6e2e6bf3faccaa022eceab9b180c575ffde5138a5164cb41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 23.5MB
        • SHA256 12fa701e94a12fdec4763caae513ffd7e1d55ef1f6a76fa7b936d77fd1909fe3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 23.5MB
        • SHA256 1d51de978f3a15d172c4dd7290ab756bbd586e25ee01f255d892cc4e7be1baed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 23.8MB
        • SHA256 27c1d45f4114374fab9fc8dc2a85822c47d1bf360ff3e8e405cfc6145caa3b3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 23.5MB
        • SHA256 ac8beb87adc1136d870c25be5095feac329052814ae69259b9f014c6d06d5da2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 23.5MB
        • SHA256 c23e3c7852fcfe03a6d62c2190a619e16b8e7f83efdcb49c2d5cc7c864378d61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 23.7MB
        • SHA256 2371bf2da11fe67918d09761655c5c3ef33012e488bd13aa25b1aa4985fd2849
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 11.8MB
        • SHA256 20a0162c2625720c07be9fcf1a53f2f528e1cb6f164f8e8d9d183e11a18ae79f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 23.5MB
        • SHA256 6cb909adcdbfb51ac6461dce34591d5506fafa59f30bb466e51d7482c8efc2b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 23.7MB
        • SHA256 eaf626a908185a2bfb9d4057023ec0909a7760ff64119af9fae3c9c283f23bdf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 23.8MB
        • SHA256 f6aa552a3a1e496807ddf7d32c3be8a6780ff5add511686296f7e07c88658fff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 24.0MB
        • SHA256 5eb8ba13d97fcbb6b154881cd85bb31f4f1ca2ce95cfd2178ae4eee5080262aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 23.5MB
        • SHA256 3f530916bc8c6d556bfbcbf74cf35789a1711f6230a71634de838f7f6b92dbd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 23.5MB
        • SHA256 df04640ff2616d02dfacbed6f56db4524284b0e867dfd993c62b5197d07800e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 23.5MB
        • SHA256 07b6413044f21fd49f42965f2c8b36b2a4a40c9ea83fe8a0ca1ed89297abb05b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 23.5MB
        • SHA256 a892484cd68ffaf4712ecd32a1ba7ca71516b14398bfe3cac0361b9189171941
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 23.5MB
        • SHA256 55a9d731309603d05736dd7376ba133f8d57d9b15f5c76dadb276760145d4f6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 23.5MB
        • SHA256 7f47e8851c3026ffc7215cbcc1bf1ce249370a34c783b9411addc338272d1070
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 23.5MB
        • SHA256 db482f5497824a5ddd711c23f763a0c7b5ad37a28d248b8eccc8f2db9bb89880
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 23.5MB
        • SHA256 5bc58dce04b8896bfb1c0b23a6bfbb0c9582fc1175ab025efb3933211dbb89a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 23.5MB
        • SHA256 9fd183c5265020b6e05fb67084b078938ca6805a6c1bcadf8933cb4b394ec39b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 23.5MB
        • SHA256 a1be5bceef43117e6860a8bc718f90a4146cd0314c61c20afcb92aed4bd570b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 23.5MB
        • SHA256 3eb32160abd65958607a30125f06ca1fb33cd09b577bfb624f8742181807be5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 23.5MB
        • SHA256 b375065c02b2cebfb427020780f4fb126c6b2f131a9035cfa5a485900e18f9af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 23.5MB
        • SHA256 1165ab14a8d1e5f4ab9ee5645a50899c76657d60244c44fd71e379b0329f4d7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 23.5MB
        • SHA256 60cd9f653adb6b2b6d4562acc799a030d1e6843f6811df3ce427dfd55ab9ca4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 23.5MB
        • SHA256 824a1e70073a969228a098eafb2952ceb854d330df1b713a727bbca0a1d8c66e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 23.5MB
        • SHA256 8c57110f6ad14c0b66b14a45e1f937a584aa48ebefd0c3f096072cfce46b7baa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 23.5MB
        • SHA256 0906c19a440c21f8b89736005a88f28a4ef65ec75419c0a378277a767adfa6ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 23.5MB
        • SHA256 dc7a61da85bbc7b69eb6881645a97be8521b1553ce3bfd77013822518ca68879
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 23.5MB
        • SHA256 7f4e1674c8f7d349e65465b0518ba69f8188f58c10ca26bf1249881321256794
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 23.5MB
        • SHA256 f0012ea9e5c975a94eef10b729e4c21b9333bef9b8fb3748a3197c9ac0a3b272
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 23.5MB
        • SHA256 78415e6b143a1067d4a7b7404c5f3f0982ef7349bb20e6f5579b6d8de4ab9274
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 23.5MB
        • SHA256 c5456fdfe46dece5cee571d458e2af3e3a5dbc94973732b6130f0c64d26d1a34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 23.5MB
        • SHA256 371c0ec3dce352ee441fba9274eed9a18dbfd7570e75ab93eee98493f092cfa5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 23.5MB
        • SHA256 ac79c9e33beda883cf294a83f9710947f5ad65ee30a803fba96488b66a1b174a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 23.5MB
        • SHA256 74cba02e3c36df24d7fdbf56a93d1ff8f394fb029f0881749a193b43fbecb4bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 23.5MB
        • SHA256 d0da9f9ca38d6733d1cc60033fbc8e1a137df5366df3990c0841c84f37db83c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 23.5MB
        • SHA256 0fa5873013daa21a64b2602bbad046712cb22386e0883a9e3eebffd0789f7078
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 23.5MB
        • SHA256 c9380c72ef7d819e6ce2026024b4673ed828802cf111eb68c2a9e9eaeb59ef1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 23.5MB
        • SHA256 7d2e6c077dea62d6f631dc4f678db8f44139606f58f55e2020e35c2cde2c7c9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 23.7MB
        • SHA256 17f0555b41058e32cdce1155f8d86cec543ece03d21a172cfbcf0494f7121135
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 23.5MB
        • SHA256 31b342cdd7ece4541191212b1201fa8a73ecd6a68cbe39ca9932eac31a3480ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 23.5MB
        • SHA256 1b5dbe68c0538955274484ed47af7ef5383db9b12515f5516291a08e38d08b9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 23.5MB
        • SHA256 d071b6a02140ed4c916db73df7d998e6728699490a65e6d281ee297b6ab99549
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 23.5MB
        • SHA256 d544763eec1d7016fe0941160267856179d19f23ab8c4bebfef8268824de9607
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 23.5MB
        • SHA256 42070c835a315fd0c6a2bd34aa6bf4f66b33d3b000d9e52ba21143185e6337fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 23.8MB
        • SHA256 adf297c8fa95692a8bddc9f8bfb970be61346eeaae02eb6bc53ec07d73f06a35
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 23.6MB
        • SHA256 f813c690e3abd18f46570886784fad2ebf683f1e16a82da12d3d9a0c7dfa89e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 23.8MB
        • SHA256 c25d48cbcf53eabf080523eb854636f87570e6f28c2e12524e3ee9f0a7aabd84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 24.0MB
        • SHA256 d60061535903e75159b58b8d430977a452a949167a64bc19588205754f5c61fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 23.5MB
        • SHA256 a73a6c316669484d9bf2eeea8d3d729a4d5b5237a3cfa2e10e798523a4833748
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 23.6MB
        • SHA256 de92903566ce93261ba703756fb6a9b35fa77deefcebca4f987e06ebe01ffdb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 11.8MB
        • SHA256 221f20aca110159b1d09ad0acdb85c99f04a11cccd51708e24459c540a01b1a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 23.5MB
        • SHA256 418d1855e3d7c601976d362f3af84635a3e0d4fc2d2a7b7031bd00c5a4bd0712
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 23.5MB
        • SHA256 818a1b6d9f0f5e45764f2680cffba80042e2693729ca6eecb7d08ce4adce385c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 11.8MB
        • SHA256 7ff642e695db38b72809d265161549fc638f462d36f6869c6ca0ff17b5a31e9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4612-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4612-6-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4692-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4692-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download