Overview

overview

8

Static

static

3

2026-08-17...ed.exe

windows10-2004-x64

8

2026-08-17...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    104s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/08/2026, 02:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 31.4MB
  • Sample260817-cjs5vsdl9t
  • SHA256 fc0ca4a8fe12e1b4b2d64585e831ecabc343abb0c68c82e3bfbd352145da0bb9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3756
  • C:\Users\Admin\AppData\Local\Temp\2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:944

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 31.9MB
        • SHA256 5ba7c62bfa6480a81e4d2ab1d5e8d9971c86e86fe0d4f7661b45bb3ca8b3083b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 32.1MB
        • SHA256 94c5b0d095fab0cd2269ba445f2e4dce6ee86fa16e4045a2373523821232885f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 31.4MB
        • SHA256 6808ff70034d6ede856d768b3b3c8ebc65cc06e2d7afa6b715aed99eb380da66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 47.1MB
        • SHA256 658234902c6326b46d38446e8f73749b948505aced916f937bead22ea283158a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 46.1MB
        • SHA256 fe28481c65589fd90fc761d2dd3896c05aaf35efd13ab18e73cb5e2607ab50ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 46.4MB
        • SHA256 80fdd0b42257b01906ce08ae7abd1ca1210da0d5db624a4d9840b8904057432f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 45.0MB
        • SHA256 d36c74aad930a6e11a93b87a94992a5d2fe21ec6d40c3f7cf50a9d51a1611f83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 51.7MB
        • SHA256 a3dddc9a957ad276d496b68fdfb9f5f755dcd14918e7d4d0fc61d4ae6fe146c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 43.1MB
        • SHA256 a4c4551d1ec39042736b5478259db6259967c762d8b3d30743dcab84e7776526
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertToSplit.htm
        • Path C:\Program Files\ConvertToSplit.htm
        • Size 40.3MB
        • SHA256 b822021fb7e444cd0478485909b64c06f7557acb3a77d0d30b6cd12f0ec7d3be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 34.6MB
        • SHA256 316c5aa9aefa9f23c6bf4e9d58cb175dd7b9a14f955de8d61f501dde04365595
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 34.6MB
        • SHA256 c00bd3e0ad8e44f0c8b83d9a1bffb273a3e1e06400e3c2e08d7518ad2cb61726
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 41.1MB
        • SHA256 e08cee98302ae8658a0db62988d0c7b74ae372fdd46007f61abe218f1ffb2462
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 37.7MB
        • SHA256 612d55af03dd7edeaa01dd952ebae2572c18d09c376468f0d982de60d3a7dbf9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 35.4MB
        • SHA256 e97429b7895ca49f97532b3281e039f0800a9005056fb80c5874cf71942daf25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 33.5MB
        • SHA256 8a819d402f97333a74f6e329e712c01af4d7fadfaf77c30aefdbcb9e53afc8a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 39.3MB
        • SHA256 13c475569e5c8e5f58f52033e2e0894a712240a84a128f35e8b195204ccaf022
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 35.6MB
        • SHA256 3fe48c56f51f704318f9517e1e862ec85b7c726c87b096dcc8775710f00c4eba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 33.4MB
        • SHA256 6f5a4d3efff0b9711c55d5fdc61ae9d2b311bf321c4a70105de9d7817162bd94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 37.4MB
        • SHA256 7fc74cca8b7e083de65ec1ab8b2674baf53b1bf047554a255616fa5ad3e51616
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 31.6MB
        • SHA256 ef00bf1550418552e07d7e1f5aaf5282bf5828291ba6f69a41ccc745455fe728
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 34.4MB
        • SHA256 ca69982b85b7b2ae8b5b2bd32c08b0bba839e218403e97ccb0fd4c06f541139d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 32.6MB
        • SHA256 b3e43591f1f9e801954f4309ef6e3b2674b48ba5ac75294494e74269113be934
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.7MB
        • SHA256 fa570f6588ee8e564da015679fdb001599dec74d31fa7abae304e0830b07d67f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 32.2MB
        • SHA256 6a423b6d4725270c964cf954aff4d5d2be60b8eb1cfc44f16700d5cce2f433aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 35.9MB
        • SHA256 a0f32e0aef5bbaac42ed11c8408eb77f98654b7e755e3251a805dc8155797b8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 33.6MB
        • SHA256 cbcd1dc5e4c9705bb640b84240e244b85a034a71e9db18fca4238098741e5156
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 32.2MB
        • SHA256 0e69351838101b0d022a87dcf46030a38d533a97a691ab6a2f3e06c95e4028fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 29.6MB
        • SHA256 ff160202db22b46cca2f4d90bc954fe121f7ff3e5a047fe586651971cbaac275
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 30.6MB
        • SHA256 cbe423d9233992feed8528aa3a53590481937b6d477753dc6a502bca6c84387c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 29.7MB
        • SHA256 202a0ed404919820f6596ea6b1c918386f1d58fb12e7e153c759e362bda11ce4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 32.4MB
        • SHA256 38ec25ad67445feec2e3c3d4305da65be606f5f6e4179ab391cc3254bda01acf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 30.6MB
        • SHA256 03299cc274a3e2b20073ae92f1bef6a7cfcf8c2fb9b0d17b649a5ac7f3878588
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 28.8MB
        • SHA256 ea1eb64e2d048100daa9c26fc17e40c4ad642dbbf317859f2010decd8d204a46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 30.8MB
        • SHA256 ced2cdfa51d28c8b9eac6a22fff59a93a59afbb3e37c0003b7643dc0570750a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 28.4MB
        • SHA256 3f83bdc9b51da5af64777feaa8e105da14ec5defce92b2a14c3ebd73aa020dcf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.0MB
        • SHA256 2875415ff9426af16df677e1ed55f25e60392bfc3ebde040e7fcc348d1b686d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 26.8MB
        • SHA256 ffaffd947b68de22db41e729cb5c6b33c9fd0eda19944cfd5d427c830db77942
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 28.3MB
        • SHA256 b6115485f17f7d286e7bd0ead2d1e29bb0f6d4bce1752536cc22b2121ef9be04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 28.8MB
        • SHA256 c58fc98d42e85b55835dbd6d6a94a0b3116ce36d40b7fded0d56aa4266d02871
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 27.2MB
        • SHA256 6bbe2320631ed91de68b6b2e76740a56cf3386b0162657682e9c5c91d96565e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 29.0MB
        • SHA256 33b0333fe099071c3853d014dc72a3023c6c785f491468fd22fea329a4178325
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 28.7MB
        • SHA256 acaaf1204de7dd7574b95a040c399f39d613af76ebcb265101e2c40fadfe8430
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 27.9MB
        • SHA256 310f0b9eff3a42bb00536a0f0f9444d75c5e79a877442c4b380f729675d9e0ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 27.4MB
        • SHA256 a875e0bb8f1307e485772310951b16e84e0eaf95e6ed0a1ebc6e9cb63b033c64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 28.5MB
        • SHA256 d4c46c672814543b2cc9b42c03da726248e006c8358111e3d9b223c15236efa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 28.3MB
        • SHA256 7254ea69ce8452ab55fe1c2b0eae43c911df4e21bb44d42f5944722518bd90c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 27.7MB
        • SHA256 6b284a547939ab7ca875cbe931dba3d79223ac6d470c8d929716d1b95603f0d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 25.8MB
        • SHA256 9bf4dcc5adeea4c56ec30a3e5cd8159b561fb9383016d0ca107c425c3b0bfc34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 25.8MB
        • SHA256 b3c8d5e5c55cef85a4c6d3007ab925814ac4818d9c89b3bd2d683f00b349d0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 26.1MB
        • SHA256 304e82c9a684c7cbe0f0e23cee79d376a63ffab90af7b5fef8842edda77e2b0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 39.8MB
        • SHA256 bd6e4ddd2e2dd1a892181264b33269e3238894e27c94d170249da9c75b246784
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 39.6MB
        • SHA256 e988007bfa6d35bf208fd5a69c0bd2ef215d5a2b9a6aef7e8c90bd0f3fcf76e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 43.2MB
        • SHA256 2aff2eca211ebb08e9e0c122d0792bf38128631de68ffe5ea9bf8956d9b02470
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 38.7MB
        • SHA256 019d6a53d404814ada2e48450b147775720b0903a4943894564b1b73c8ab86d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/944-28-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3756-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3756-14-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download