Overview

overview

8

Static

static

3

2026-08-16...ry.exe

windows10-2004-x64

8

2026-08-16...ry.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    131s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/08/2026, 01:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-16_be734c587344c4d2c081cc2a75e85eb9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
  • Size 4.4MB
  • Sample260816-cbf6bsbl5t
  • SHA256 34165e3d0958aeadf858ca95200982508d29465a175e9323673467f0a5de393d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_be734c587344c4d2c081cc2a75e85eb9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-16_be734c587344c4d2c081cc2a75e85eb9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4116
  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_be734c587344c4d2c081cc2a75e85eb9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-16_be734c587344c4d2c081cc2a75e85eb9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:244

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 4.4MB
        • SHA256 876d3613bd7e62d14b49ed04ec822e2f7476ec6f0a4526c2840ca048275ff83b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 4.7MB
        • SHA256 127e3b6679f06f66c1d588e1b5001fccc4e0430ac5595941a7d4669ffaf20fde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 6.5MB
        • SHA256 0af44413ea1fff34cbe2c94b82da13def73d3e28546d7d681b1f8a0f489faa06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 4.5MB
        • SHA256 6222f1f3e6762e97dc19530e3c75d6e46ecb44dfd7ef2bc9b4b1090a577e5e42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 14.8MB
        • SHA256 35e75f05a8b6f03fa8e6ad5d7a0fd06c6d64f0059e06985c10addf665b25b00f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 10.5MB
        • SHA256 0260860512ef47693fd984eaf676cc2cffe0ee541926e2790a9c8ad999b071e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 12.3MB
        • SHA256 b4fb24e6d28740655122fb0749169244111e71b31fca962341457f14b0bad07d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 11.1MB
        • SHA256 5fbb76594de696c60f3aff196766ddc3fea925c284513deefb67ab8db549f386
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 10.4MB
        • SHA256 cac4130a03150be99695ca1c61c139ec051bb8492f6bd76379107f4f418e13a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 10.6MB
        • SHA256 d00c85c90ee0e8b9c6250647a78b4e5276641fde2b8a8617cddd16bc4a898ef2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 11.9MB
        • SHA256 90fe0437ec683af06c9973745defd17c022f5924fd1013c4889ecb938b60a459
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 10.2MB
        • SHA256 1d724789c2f79e0936ec8679ff4a342ac5b995d93ffebf2c0f013ea19e972e90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 8.8MB
        • SHA256 61eee0e85cca5cb2827000617c86fccd2502e386cef6117bbc6336ab26b1d80b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 8.8MB
        • SHA256 f121ba2617630d23a4be9a6655ca0fec72d5de49c831bd3087adc060e294f59f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 8.8MB
        • SHA256 abac1c669079432092036142c183da9743bf9acc8d184a1ec334f9452b78cdca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 8.8MB
        • SHA256 b779b41c122b5e6c182c53308f8ed45144f8179429a11b89e4b67769f8a3c2df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 8.8MB
        • SHA256 38f41df4f1df237b638ae4e80dd485ce0f48e89a9ddb411dcf4defe1afbf62c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 8.8MB
        • SHA256 668c5f477d66f867193da41c1c669b707ea8d8946cd1dd605eaad5f76f709c58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 8.8MB
        • SHA256 a5e97df63699339067a6773ddd0867dc77033b6e6445dca34ae4d163ad5cba05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 9.1MB
        • SHA256 a74c7c6710f2ef72e29aa3cad35eea5ef91a5564c60333b6ff255ad45345bbbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 8.8MB
        • SHA256 fdcc25eb6d5a977cf917241ec2c1bee277c79d8eede370f8f107ede30d220d17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 8.8MB
        • SHA256 2df2aed6e570a14e5689a97e86f207a56a7e43f8f2f90d104851a5c10b07b6d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 8.9MB
        • SHA256 4f073438ca45dc41c8900a2a0e7aa5e0e6878edfeaf8a194aae29255f53d2f85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 8.8MB
        • SHA256 fc0b4d7a37d820f7a7ff81d44548add7b4c46ff42799f42c2cf04a0e2ff03b31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 8.9MB
        • SHA256 8fd6186a008b5d98cb824cb9a0c064c04d52908a78761b242d7e3a9fadd1c5b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 9.1MB
        • SHA256 44f7846135c6c95d897847bdbb7a696b6a6511bf86d3f56d37ca32df2e33f2e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 9.2MB
        • SHA256 5ecadd1791dab99447afcb203bbbbf583217e9ff65f3ac3efd5ee6b7449df440
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 8.8MB
        • SHA256 9711536b55b69017e66e207f98a2ca86efd2dea4634e48379f5ee617c38f9e83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 8.8MB
        • SHA256 5e20ec3a1625584ff0157399c9b5896df6be5262b13942d3e31ae68153efb184
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 8.8MB
        • SHA256 e744e455f6a23f76d12aad7fc5f8255930044839cfeebb5689d555a15df48c15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 8.8MB
        • SHA256 39c331f380aeef9fe82d94b61199e6640a823e7f653c0d1ee209f853b10027ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 8.8MB
        • SHA256 70b51496c438ba264af2efc06a50401da9eb7703c32dc58b0a4dbadea66a30c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 8.8MB
        • SHA256 4aabcae69f2b1a17fc9384ba9c8728bd793e888bd3c05c4a28035f5a8a7d55e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 8.8MB
        • SHA256 2222d887cbc55566957b605dfde5d1e5f46b7c5ba7da92c6b0bedc064905df3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 8.8MB
        • SHA256 0d30acdc2e2cb389dfea95f05e3d6b0b82627d3c2e7900ee3b3171b03ac0dcf5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 8.8MB
        • SHA256 1d05780fdb8bb08fcf0c0fdc896269ffc6a5afddf0246d310553812fff95954c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 8.8MB
        • SHA256 33d4dd5b88c62e834b8f568250fbcb6fc38ca2a670958db8dc637c0af2794c7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 8.8MB
        • SHA256 d37f95421c022c865d90fd52e8e5c9361cd9ff8c4fb1e97f62863c770a1615bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 8.8MB
        • SHA256 daf0f77b205ef24e153b98e49916c98607db01cd419bb67291716185f13f4b27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 8.8MB
        • SHA256 19655737e0becc9b109815f154c53203de1320775e651e8e28f7405509d14cf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 8.8MB
        • SHA256 94d968fcef17d313a97abb6d4eba04d392b7edda5d112139ba321254dea1cd87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 8.8MB
        • SHA256 1da67d57f8781ac7de128441c176ff7f3a31d6eb8d5a507373e5f148cc5558bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 8.8MB
        • SHA256 3e42958c6e78546d3012e0f69789488c309e084d0f306351e2b93386d322d759
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 8.8MB
        • SHA256 d550a425162aeb4b009e3a22c39888c334aa6e4848fa3e12d5a9480a24f1dd9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 8.8MB
        • SHA256 dab1b50600097280919fca3f89f8222515bba9ace3bf5ef71ec6e4e7056b7643
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 8.8MB
        • SHA256 4ae41b5b1394cc5c67ae9cd78fb411132e3fca7d4d2156a10d7baee15b0c2c0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 8.8MB
        • SHA256 945dc7a1d0de42e5b46cc521afb2b53e5b0c2919afa8f24f05a845a48bebcfca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 8.8MB
        • SHA256 95c170ca55d9cbf45eff771592b02d59306394ad1a00bce284efea204b711251
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 8.8MB
        • SHA256 9ed19ff16e4d5a8eb685af430f8052be08778a26c15a6cd98ce587c20fc6bb49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 8.8MB
        • SHA256 870e070538d07ebc26027be41838a88321ac1291b881c617c8adc2545608aa34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 8.8MB
        • SHA256 b11c47dc96305763c746baa7cf2a72b313ebcbf4d24ed7351aa45f0303dd0ccc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 8.8MB
        • SHA256 238494c5c6950326af436c7652eca1766c03c24d720a3f17d469b569a5998b28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 8.8MB
        • SHA256 c39bd0d4a0b85c335cdceb8a92b20b0599c75553ea142d37d8a661afe83f2b78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 9.0MB
        • SHA256 a400d41124bd4088af663adf1d8cdc417da0afc53f0c5cdfc1c8957eabeba6f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 8.8MB
        • SHA256 cf0cfc7e204d66c7cf1515c73703f9b2e654fc28f07b521ff15d27a0dff78d00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 4.4MB
        • SHA256 34165e3d0958aeadf858ca95200982508d29465a175e9323673467f0a5de393d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 8.8MB
        • SHA256 d6f9507bd34ba61999d57488c1f90c933638e563911a15521ab6c5235ad4bd87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 8.9MB
        • SHA256 f3b540a49675098568fba11a8b613a1abdb05be4dc4c0ece4c3923fd08a24850
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 8.9MB
        • SHA256 830c445bfed4a923e0b3ebccf526fa7132bffaa5c18fd9f878413bc3703b995e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/244-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4116-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4116-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download