Overview

overview

8

Static

static

3

2026-08-16...ry.exe

windows10-2004-x64

8

2026-08-16...ry.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/08/2026, 10:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-16_a59dfff811bbdd28303b0d7825bf3c04_amadey_elex_emotet_remcos_vidar_wannacry.exe
  • Size 9.9MB
  • Sample260816-mas4lsvgla
  • SHA256 57621e4c806d1f73100ade6b9c26e99d90ce052abfc4bfd520abd5d8e28afa5b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_a59dfff811bbdd28303b0d7825bf3c04_amadey_elex_emotet_remcos_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-16_a59dfff811bbdd28303b0d7825bf3c04_amadey_elex_emotet_remcos_vidar_wannacry.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1212
  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_a59dfff811bbdd28303b0d7825bf3c04_amadey_elex_emotet_remcos_vidar_wannacry.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-16_a59dfff811bbdd28303b0d7825bf3c04_amadey_elex_emotet_remcos_vidar_wannacry.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3432

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 10.1MB
        • SHA256 29bb1cb4e3940c889bbc83190dc0fced1ed853f247e66fbf4c1e780976215498
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 9.9MB
        • SHA256 1b27074ef9f9d4df37295ef6b40bde0c8cc4b8bb38fb762e9dbf419b89203d4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 23.8MB
        • SHA256 75608b6c7d7e5502036ed25cfd0579201e17c1ca86a614d3323e64de8eaae24a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 20.1MB
        • SHA256 ca9554ae04c27affac8b940edd6925e4b97ec003c47c563f23ce4dbdf2914733
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 43.2MB
        • SHA256 bb4bc734d8d7c4f8d916f879896ad22a00583012fbf3eb66613418688f20f416
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 12.0MB
        • SHA256 743acd0531a752aad60e06dc472fd449cba30b9b9c153743ed8199fbcaeb881d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 21.4MB
        • SHA256 8480ee3f11cdec9f9364013fac4db45793869f83ccf55ab7b9117cd531610378
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 22.0MB
        • SHA256 0526f295b4518bb6c74aa0593a970ea4497cbb2d36a0555bd9e247a0896348fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 21.4MB
        • SHA256 7d7195afa0834babb21ffe056aeb52fa4aea553497d5a3178e00657d37f507ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 21.6MB
        • SHA256 35f996a4d6f38066e6fa07350ecac19a6e2021c535ca13370b44f922001ea3a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 22.8MB
        • SHA256 ea18dc7f9ed7e79381245a744d74bf4775f09b36e0dc076a8edd3d888896cfb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 21.1MB
        • SHA256 b472af5b7239adb4b66e4f8e10c7b616ad1b4b78cf00e1ccea4062d9e9e00c22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 19.7MB
        • SHA256 81f275f16bb6fb4d6e080a304b4582555bd46b5ad40e6e7ff835ac61483f65e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 19.7MB
        • SHA256 cdcf044fed2e9747f0c760eab0049678eb70014dd63d1a8b36083039327d5f53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 19.7MB
        • SHA256 54970dd15ca367ded531b657b0c2a62c0b48194661054e1932fae2c8d694f42c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 19.8MB
        • SHA256 8e69bfa28e04fcc2dadb5467dc4c6b128275a26a7df0d1afac36be74511553ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 19.7MB
        • SHA256 6cf7097add83407652dae41e818b7b9c1dec468a2ef47f17be26498c5a851069
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 19.7MB
        • SHA256 543b477e3b202f49f1b796d73bed58ab58caa7de7a1bf95213e594e490a2e079
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 9.9MB
        • SHA256 7e4b70da3deb27185e0cc3d1c17f2c873553d281a559945a376c2d6deaebb239
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 20.0MB
        • SHA256 955cddb024cf67e9ff01a98d4cd69e64555ff8f9f8b093df65534e067050f39f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 19.7MB
        • SHA256 eb1a24965b410483e26208aab912adc532606dcf7bcbaf0e07714e3b5c696641
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 19.7MB
        • SHA256 c5d7d2d2feb80bead8292d7bee6c9ccab1bde8c84de9ee932589b686b1a50f4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 19.9MB
        • SHA256 76d3ffc0a943511748abc7d12e0e5fec5d1c31b3b692177f92c75c12adf8e1e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 19.7MB
        • SHA256 93b580c5e1f735878c2e915386ae66608924fc4a8831bd29de96de017d20cd03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 19.7MB
        • SHA256 9d0c6638637c1d13bd58cf3adc951a8e525cc1ab297a99619ffbc688a8572a4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 19.9MB
        • SHA256 cd4b8e58577218d7da58f020b585567c1be88777c89cb8c965f3a620dfea18f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 20.0MB
        • SHA256 0401b13a9450818b91e03c4fe18c511400ff4502f0faa388ecc6756765c5a7ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 20.2MB
        • SHA256 11244b09c81e624d0e8b64d4958cd01a1808d8d428d5de827eeb59174a4387f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 19.7MB
        • SHA256 91e62929b8ae847b54daab0a0b08be1bb9e5367eeb5c570af9123f4f96c28347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 19.7MB
        • SHA256 8babc33042ca845aac97f24a7d11c284622784e48997dd2cb0a4fe09ed448bd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 19.7MB
        • SHA256 3c513276007faaac8ab00febd0bf57aa5a7feab07ac50fb24f33986ed72dc17a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 19.7MB
        • SHA256 9d00082c8ee17e771ccd1df8bcc59dcc4bb3bbffd21cd6338218cf6ef54ef2af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 19.7MB
        • SHA256 bc204c18533c90bcb98dc43de4371f192b15f5f785e114009d6873423a90f19f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 19.7MB
        • SHA256 8644ae80de607c23c624a25a07504b51ed3f7f7d3676f10c1a402990bb14382c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 19.7MB
        • SHA256 e8a3c74e1474131bd9a2d239f9543e15f536e2daa28c7803ec9a5b5f9200bb1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 19.7MB
        • SHA256 d6d65572e548b956d2bf6ed98ced8cdd190dd950965dbf336184fe68e8d5f24b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 19.7MB
        • SHA256 edf2d90bea742ee69fa67e105e952530d3e24833439c5d0acbf0efbc4a0f3bf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 19.7MB
        • SHA256 69c92e0edc2a48e7faed3d85bb9b565c25e2665e621fc170bf9f7ae56c7355cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 19.7MB
        • SHA256 9d32b3f23240f825842b7d027704280d75821bcee28abe6ccd00b2dc3e69ed82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 19.7MB
        • SHA256 8e683983c5a02370a8e8572344de3ea8f8caca1a73dd47d04b1ef7381ee3ea4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 19.7MB
        • SHA256 93c5bf01ff66a81a2f51bdb88dcff5f88ad2bd47e17aaf129e0cea958dca5ffd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 19.7MB
        • SHA256 cd361e498ca8a70fef20f042af4835013cf6b86183dc859ca2dffe39a56cfca3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 19.7MB
        • SHA256 9460d921fb639cf229809f9ff7d402e68228427732bb40c91065dd3b0190f2db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 19.7MB
        • SHA256 97c2989ea568e93f5533059623d97898a567466853d753a0f6e7e9b9f76895e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 19.7MB
        • SHA256 aa50602a44ebc059067f859b7b502c43bcbb5175e60c55db6053cb69ef89cc61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 19.7MB
        • SHA256 607c60cfa8ebbd5a8840fc58682ed8ddc68455994904e98d05e48aed8f0c2a0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 19.7MB
        • SHA256 2501611e3d681c76cf9f4e197b1e8bd4d193187e539273b3b825765eab4c127d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 19.7MB
        • SHA256 6c995561d1de0ae9f5d3d041ea4ec3e50c7eeba3bd335d2ee19441c7df9bfa84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 19.7MB
        • SHA256 30f63c401b0a1c7d7c247d626713dd02bd79107611c1007623b86068874ffc7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 19.7MB
        • SHA256 3813889e1b9529dbf18d4ee2d5d81ce6914c79a4e12366cdb929377efe1d335e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 19.7MB
        • SHA256 e3325b818f17a2e93bb811550fd9521e87df18fa7330aa3985fb80b7c01c3c29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 19.7MB
        • SHA256 745594bae794e454408df6b244dd7f862f2ae79d7d00aa45741618c5da5240b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 19.7MB
        • SHA256 99e52a5a02f22e3fd12e70ca8791a280db8ec39ca20fd43b90e9a671f8e35c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 19.7MB
        • SHA256 7d251505ca82df80ada2c4e73774340e355447477a4ca9c26461279641f96a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 19.7MB
        • SHA256 af49c17554333a1b47c492afbbde346589090a7d0c49d4152f56053d6ce330c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 19.7MB
        • SHA256 aade1a3ae2d9902010858f99035670de1e97588af5217e7af1b3a47914aa1407
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 19.7MB
        • SHA256 e80875f97eaf096999cda0c2994de5f08441aaf04709388f602581f7b0df50f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 19.9MB
        • SHA256 320d4b5fcfe26c0afa10c615a7e52a0d511cb052b9e49803c607838076409756
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 19.8MB
        • SHA256 61757cc8130d48d722b9711c83803b3419fa0569b35e6e267646e210ac4f8e7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1212-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/1212-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3432-19-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download