Overview

overview

4

Static

static

3

2026-08-13...ca.exe

windows10-2004-x64

4

2026-08-13...ca.exe

windows11-ltsc_2024-x64

4

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 04:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-13_939f0f225ccf143e3eb3276dc24e5dbe_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
  • Size 9.7MB
  • Sample260813-esh3cszvez
  • SHA256 5386485685a484a626b227b876bd0eefef9fb62ae740f31bdc4857e9b0623ca1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_939f0f225ccf143e3eb3276dc24e5dbe_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_939f0f225ccf143e3eb3276dc24e5dbe_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:5904

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 11.9MB
        • SHA256 09d0ded02cc28c0e49c583a009df22796528702e3aa9c04e2651b743789ad932
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 2KB
        • SHA256 deab384b3444b52f96b0235112fb2c0afec3c40176509c9febdd1a12b440dfb2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 61b713cf137fecae43039a3f5b721217eab36f4056821858accef52c6c7beead
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 f32105b1aea56319d4d3ce260d9693072770e9099e0eff786abd7754272d5f53
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 647ea8695739afe6767452fbf201af991465173a4900d07a0c6db91b41ae44e0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 9953ff798995fc4332a06b7487d8052ae77df7847c0fc4e237202e8ef3b351d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 b4d62d60119f7cbb945638fc11a4bfbbea4d1781505be5174c3728a43f357f4c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 4KB
        • SHA256 348c8c78c5916a7adaa8699ce6628e42f870338a60491570f037cf7a6cdc0c83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 4KB
        • SHA256 e94ed8380a4a6077b0cb4558b212372aa8967d032608369c829aee5e4f0305e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 408B
        • SHA256 c95625c6df6dbfc2397665037e01b810f9c80b5107a364dc3332bc1a201c36e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 60B
        • SHA256 668363022751a15c50d60ce343daae2897701894d4bc0043f521de54731e3146
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 688B
        • SHA256 5864bcfb14bf93b72843607e127cb3488b284aceeacdd04e5619acf6fa7e2934
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 1KB
        • SHA256 37464ad21bb50c748d5bba06fad9bcab8387340d147f29ec49ad4415b84c3c00
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/5904-5002-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5589-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-2371-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-3350-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-2029-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5003-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5004-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-2040-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5590-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5591-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5730-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5731-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5732-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/5904-5733-0x0000000000400000-0x000000000040F000-memory.dmp
        Download