Overview

overview

8

Static

static

3

2026-08-13...ar.exe

windows10-2004-x64

8

2026-08-13...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    128s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/08/2026, 03:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
  • Size 36.7MB
  • Sample260813-ejp5baaq4x
  • SHA256 7bb589d66c8a9f9c32505e0836c050a5f18ee3040b6526610ee787e73ec8dc9c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4356
  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-13_a6f2e9576ac22a1c899892fef599079d_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 37.4MB
        • SHA256 80a9459cac1b73d5a9611d02c5aea036a0645ae0311c2c6316391648dee37d05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 38.4MB
        • SHA256 6d5113240831d70f85b2cdd9af9d2111c8d0fa3a2c6a2d104ca5ffb5a9876a14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 39.8MB
        • SHA256 5abf3f5d93d02a3fb4c914a93bbed816eb9d03529641d77256056789189e1afc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 73.4MB
        • SHA256 0c631c6031d17d9b50954204bad2cfa87ef0096733f50d9a568495ba1e99f0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 73.4MB
        • SHA256 be48dc7726e20745a629b11ed70aea7f8168c15ed60301fda740a51aa55aec7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 73.4MB
        • SHA256 210cd2bda079c343d884c9e4f0b5d1e2da94686f09463ee1d0405299863722c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 73.4MB
        • SHA256 bfa9f9104305c098e6eb6a63bfa0ad63d4b2d670193ba5943ac0a4e161475a6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 73.4MB
        • SHA256 3a7963fb6539226bb824700d04f940ef17c26b99a06376c4943767b3b5119ef9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 73.4MB
        • SHA256 2570c90c829bc5f3e3eecd7449bbd2967e3a2201a0de1b5bddb91092f1d45a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 73.4MB
        • SHA256 5dfd92ab03980828855969af10cb0974081ec47d05333ed55a9f8179338dbe05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 73.4MB
        • SHA256 9e686ec8051a2823b6a3cf286f08d5e883364779390195ac3119a96528fdd461
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 73.5MB
        • SHA256 b69ce17fe5fd6dc76e5c6a6b7c4fec8f808f512dec68047ad7a01cb1cff23cc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 73.4MB
        • SHA256 6d5aece028033fe64536da660751b370a6fcb45e9530ee36e6c5ae44cd83e7af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 73.5MB
        • SHA256 adb4cc7e19d43f29f7fc0c8aefff3d459dc5af5cb6f7b84725effc7296d6d7d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 64.1MB
        • SHA256 91ad21dd4657da44e8ffb91c25d8673c824679301a1edb083562f3338ad3bb0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 69.9MB
        • SHA256 7e8b9bdb58a0dc86a417cfa89b03cb87bab84536a3ba12a0f7c4a74d2caa19d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 66.8MB
        • SHA256 28c4e3fe85856ac8a420f4d87fe69cb8f472618277606d66cca315561038e6ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 65.0MB
        • SHA256 d121d4af3cefe6b7a23fd8a9a07f09adbb35a940ceda475cf20db98ba4fcbd2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 63.2MB
        • SHA256 48dcc9821f4b83551423ffb9df8ac6b917d296aecff4921b27ed99e947f192f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 64.2MB
        • SHA256 b020175757276438d3b9346bf404f018b9605125348832eb00abc54460a32f57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 59.6MB
        • SHA256 87df53263dd487b08bd3c38325702ebde44ab8c79912af542ee3e17bf34d4010
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 54.0MB
        • SHA256 be695344814a6cc3e36dfe91d03da9fab9e3716c196d8af5698f5206f63a719a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 58.6MB
        • SHA256 21012a5f2f57dc3568444bb25f9c1fbff25606bc4c5364d349a7aa5b6a6521f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 56.3MB
        • SHA256 6cccb5c6e793cf99134fb81e68f163383bada127d8dcc2f712e6c6742d6ce69f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 56.2MB
        • SHA256 2b2c94154c336303de7763bf3d7e2bbf4580a2cb1dfd54742d80cb2716afcf27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 55.9MB
        • SHA256 666251efebcde5172d9dbc0916c4220f0b20be48b60db1953a03bc9d982efa68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 34.6MB
        • SHA256 a0e47c3f01e629e613ca3b14e9239e9e02af811242cb882b269f3857f303686d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 33.0MB
        • SHA256 ea9903189cc2907018dd832e92087e9418a40d684eb91167b1b4670e091fd7b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 31.2MB
        • SHA256 8892b816bf5a6090860743455f949c857366fe548da6a9fba8289208de825fe3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 30.4MB
        • SHA256 16c73734be9f174fb1ab31e41a430b3cb797d34eba4bc541d94127356ef8ab97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 29.6MB
        • SHA256 4edd2964193b2a4e3d441064acd5d2fd91619eeb1076ddf05320780b491090a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 19.5MB
        • SHA256 942f49e6857cd6968c3840f6372b0f8dfd425a4ca475b4b3f2f11226998a1d14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 36.7MB
        • SHA256 7bb589d66c8a9f9c32505e0836c050a5f18ee3040b6526610ee787e73ec8dc9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download