Overview

overview

8

Static

static

3

2026-08-15...d_.exe

windows10-2004-x64

8

2026-08-15...d_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    138s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/08/2026, 03:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-15_f9c1d19bb41ae46afb51d9add610266e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
  • Size 40.4MB
  • Sample260815-djpm4syshw
  • SHA256 b9b5ab2c0a9bd36289b3609d64839a324740b8d84cd3b165e6881bf6fbcaee86
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-15_f9c1d19bb41ae46afb51d9add610266e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-15_f9c1d19bb41ae46afb51d9add610266e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4808
  • C:\Users\Admin\AppData\Local\Temp\2026-08-15_f9c1d19bb41ae46afb51d9add610266e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-15_f9c1d19bb41ae46afb51d9add610266e_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3760

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 41.1MB
        • SHA256 08192db1f2c8f529a2993dd2d5b238d4162d88e4bc8e78a7a14de84b9248284d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 46.5MB
        • SHA256 3bf51064cad386a82f5acb90a6cc24c12698ca254ba810e01df564d1e0d56daa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 42.7MB
        • SHA256 32a8d2e15282f73874bbbf43b1636d96ff5a95123bef49746397c46a38fcdb02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 82.5MB
        • SHA256 5b8ea321d7fd9d4653a8288438b93fdf678f956251706af87268065c5bba27cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 82.7MB
        • SHA256 6915f04a55dfa0a598a06480ebcf115fd23482cbc1f4d419cb775cd600a962c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 83.9MB
        • SHA256 71a39d6fddb4d916125990368a36e12efcc283fa003068cca5d3cb16c18c19f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 82.2MB
        • SHA256 893cbc3a0ab54f5c7ffd6c5c68dadb1ebf98e62bf9755399cf9d16bb819fadb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 80.8MB
        • SHA256 c3578942bc77c4fdf69b85388b8c20ef272f72e10bac2229ea4581d6fcfa150f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 80.8MB
        • SHA256 eca765fd9d18667530e074b01975bf8a8b9051a9b16b664b81f415d2b4d19dda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 80.8MB
        • SHA256 f4f9fc16953c178564b895490558260b7b27f0bcffa6cd40d2d472db94460879
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 40.5MB
        • SHA256 fc000b16690f0721bff1b379dd2e33db7315972f8c0133d8a0af1ed74b52ee41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 48.8MB
        • SHA256 26c8c64c27b660de1cc5af6437433a0cef948fc6597dd462af278debaca7d45c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 42.5MB
        • SHA256 fef20d95aa55d1e2b39135f88f63cc52afc0a65a19f19e917ae1fecc67e0f375
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 40.6MB
        • SHA256 72ba3a101c31951e75d42e77e121ff89c26e50d912124439bf57199f629fe712
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 38.7MB
        • SHA256 0fd39959599414adb9a927aaf78481562a1a742f32494fe90fd407122cbafe5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 34.9MB
        • SHA256 c9784fbabf9a0d666c98cc4876b09a81d5cf4da5040563e03253d8a2114a49d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 34.0MB
        • SHA256 670aa21a416cb08a94001b7d7a71a65ed090dd1f019532d87ac7a00414113222
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 27.9MB
        • SHA256 b5480b2f3256fe036562a8c9503e788a6a76eb4e9104c786f57959d016430c70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 26.4MB
        • SHA256 4299dbef2e5084b8c28a3aed93dc2b7488875f4610dc9ff0409036b2ed885665
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 26.2MB
        • SHA256 2380163631f0709e3a97f7a546e0f1132bf99ee2965b71749ebce03b32c52430
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 25.4MB
        • SHA256 36d1f7297a97d83189791052aadab79f71ecabd4b26ef2faaab030e3e2a57841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 24.9MB
        • SHA256 515dcdf6cdb23c7a561ca7d7c8593c918a5ea57bbcdfb6a80b707186735f012e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 22.7MB
        • SHA256 347cbb089fa2b2bb30e19a780a0df509346f00c795da6cc661bb9014e4ceddc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 24.6MB
        • SHA256 e2472c234d027441c23c6670175cf9c26e42f999e51a903d15e27962a35b2499
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 24.6MB
        • SHA256 0ddc03035d1453d92933441f7161b64064b6617f69ed3a6b9e67cd2baaf0d596
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 24.2MB
        • SHA256 c7c7305d354bb181e43eec8dded1cd99a94e8d32cd98cf6c8b4a90668456e351
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 23.8MB
        • SHA256 08e36d3a3c64eae0ac1839f410068d9206033e6828158ec0ef4644956a11755f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 22.0MB
        • SHA256 78259ce7ee43702f31d82a5a1e4b4e3c7fe28ddbc751d26f2ad1123ffe1a0f45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 23.4MB
        • SHA256 222c5e01320866f567a2cb6d1259ded61fb3c92904d40b492fe75a31ccb0970a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 20.6MB
        • SHA256 52c8c44b4585dd7a7907c439ca371ad24ffad7cb0e2d51e9519410a98e5a5baf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 24.0MB
        • SHA256 fbf668a421a70768c9f6da1f449691ec65a283c15c2909421db699cb7ff04d5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 21.4MB
        • SHA256 ab8d33f7eb69c4b4b5b2edcc09aca22ffd1fdf8b4b14d725d1ad89bb1dcb8cd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 22.2MB
        • SHA256 2020a369e3be48186ca5d9710b114164f1531f94e677a05e5effda12415b3308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 21.2MB
        • SHA256 c9477b50393728a26f7e4958ce26a6a1abfaa76f92ecc5f1fa8685ace1bef107
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 21.6MB
        • SHA256 ca2836a20688f3ce20be514c2c2e544473457c5b95b04348a30967192719c767
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 21.1MB
        • SHA256 bd4388a1cbb176da78a2803efabdfedd0672fa69c47073b44f4b3ee228f93d0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 21.1MB
        • SHA256 2c88da6004b86cf1ef0ed8bc0a26707ef34bb2ea14240ee2b2d757e44b0e9426
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 19.9MB
        • SHA256 629c2577e6f58fbbb182383fb28f65b1f1cb6461a1ba462bbf334ca073421e5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 19.8MB
        • SHA256 f1437522b960c094e67926fa3f452022a7b72dc91f58f309d6bee293ac283f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 18.0MB
        • SHA256 f54b4a742da12a4d2391ace3702a2f31f7c96b9c0df33c831abeeae0dc5b11e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 18.2MB
        • SHA256 cca4fcb025dd5059dc5e3b92a1430506a027e8a682fbf5ac0868a00c19ba75b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 15.9MB
        • SHA256 3d326bb224c07751642f0715612f87e51faf931eee46aa79594a22c782f147bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 15.1MB
        • SHA256 e558ecc0f2b44f462a1e79ee4e9e9aefe493936f704c4f551c90cac7343b99b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 15.4MB
        • SHA256 83c3699f3a6aaaf28374ad2eefa6302bcd945781da921a8e203ccb6e4c1fb092
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 14.8MB
        • SHA256 ed31c072f8fcb0163b1209bc44253297fc5e03ffe6a658cd98c0367757964eb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 15.1MB
        • SHA256 84195f505384e6b9f89be7fb4a93e2e0556a3d62e5f8fb6dc6926f0d9c843f76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 13.8MB
        • SHA256 48e5005137fb8e8f535c35897cb3e921015d7447b39a30e5515a533a439283d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 13.4MB
        • SHA256 a31359f2ee9700f1f84d676583406095a80d1ecff4400a53e4b13e31dd547865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 13.8MB
        • SHA256 1d5e0b44b77dabc6e0f50a008e8a8f4c79ea6e844fdcd5ab9f9950d78cb6ee14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 13.3MB
        • SHA256 3558fb2870ee54cc653fb2521357ca4a5084f0f9af003ac5a754581c3ac08f65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 12.4MB
        • SHA256 467b66745f900eca610e9c5d4c085e906e021e96cc4ef4ec08bbe76d6721689a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 10.9MB
        • SHA256 878d7fba5c4801a40603fa25280aec90ad7a0d91df3d597d69a223fe76d0aef9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 40.4MB
        • SHA256 b9b5ab2c0a9bd36289b3609d64839a324740b8d84cd3b165e6881bf6fbcaee86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download