Overview

overview

8

Static

static

3

2026-08-17...ca.exe

windows10-2004-x64

8

2026-08-17...ca.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    26s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/08/2026, 21:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-17_ec9b719c892d1a0165fac54a8318cff8_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
  • Size 27.1MB
  • Sample260817-zy4apsdg49
  • SHA256 ec98d9d68f492d7a3175b943a29a38326c4cf1bcc540063d75100dbac93984ed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-17_ec9b719c892d1a0165fac54a8318cff8_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-17_ec9b719c892d1a0165fac54a8318cff8_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:6108
  • C:\Users\Admin\AppData\Local\Temp\2026-08-17_ec9b719c892d1a0165fac54a8318cff8_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-17_ec9b719c892d1a0165fac54a8318cff8_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3260

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 27.4MB
        • SHA256 25c354397075109354e0ac42fdf30e12bf67c9aa96221dccc60b8a66767f165c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 54.2MB
        • SHA256 392ae712f55b06e1c1f69210c4d2549b18b21d54006b4bf91583996540183f02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 58.3MB
        • SHA256 9700b03b807886ead5820f4ab594288ec45e315797c567dec0a1ffbb176eb2a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 54.5MB
        • SHA256 8c9f52fea12b8bb4c29e13c5b3af76488283f83d61cdc9a6591917f04ba0ab73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 29.2MB
        • SHA256 a045a28ed06e83c03216a770d907fa460cd9738fa0157483d0b1372f9f122861
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 54.3MB
        • SHA256 ee8b383ec48d59989cf8e14806f03b96578e5dadc716949ec4bc37a0babafad2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 60.2MB
        • SHA256 6b82c82aca35bbb96caacfe3ea6d8ede3f4592813b3ad64b385f1cc188901777
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 57.6MB
        • SHA256 36314ad14700527e32e6af4d6a8d9979136fddece46195fdf84b8d1243f5f929
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 56.5MB
        • SHA256 677581ac9d765856965ef94bec82dd7bd25005aaa97bbcdc5f5f47f9d4abae08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 55.8MB
        • SHA256 e5bc3888c264a95f448fbd31af6d138b0951dafba974b76106af3cc7ab3d60a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 54.2MB
        • SHA256 da2cdfda62733119a8454823cb3fd8dedb047ac497382be2660d665bba2b6e7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 54.2MB
        • SHA256 191b660b8b7afe3c7690568660ee3408f2d6796cb51875d08d928b0fb94d70b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 54.2MB
        • SHA256 cbb7949864176bb18c2d074b0f4d6a258ac11f76fb98a8cfefbbfe776ee7a892
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 54.1MB
        • SHA256 3ddecf0769f55b94d676aab0ca4fb2aedbb4e3679f4a108c5e0f1fee373bff9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 52.2MB
        • SHA256 b8b95f80e9f3ed1bb247505fe02b3d2b31e449d15b9ccbf5068130e42e11e643
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 51.5MB
        • SHA256 364dfad4f9dc255c5a93463a098daececa816d1620dcd64a8fb0e5c0df55d1e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 50.7MB
        • SHA256 aea6f82ec3d7e3763db9429a5eec445ce34a042febca1a30ad38b68f90b92882
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 49.4MB
        • SHA256 37ec64a5768bce707e80813ca76bc411215be97589918667ce314e7d591ac392
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 48.7MB
        • SHA256 c3da9363f274fd8c06c1c9f61f584e8b2d411e913738b989421363f5f3d29aaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 512KB
        • SHA256 54a9cdeaa70d56716fea0c2b033f8174b1495f38e428abc781f5cd97cc816efb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 46.6MB
        • SHA256 d6ca049db4f7a0f46e95c7c04b085602acf545688b4ab88e5a6987ee8916bfce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 45.4MB
        • SHA256 8e63706d4e50b76e1f849603aa5429d76e7eaa7cf8d2d71bd4499236e606734c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 42.8MB
        • SHA256 a50472ec11ba836a4e0ca47b7c019f5858e4cdf6453dd147d54dffe6fc2ae9d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 42.1MB
        • SHA256 5220050a0ccada6f85a643402fe4ec4fbd60ffd29040cadd0d6272a1c9cdfb26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 40.8MB
        • SHA256 e83cadceaddee3673bb693c8b07e16ed423d7382857aeb296aa3e162057303e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 39.4MB
        • SHA256 9b35ba68209c34852c9895540fa4a1824d468a2059f5665ae22b0f498e342770
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 38.5MB
        • SHA256 24813dc0ff43ae988b8ce2eed3de5aa8f5d72a60527ea93b5a1387b7e0181211
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 37.8MB
        • SHA256 ecbdde80115ee741b1c0420c4826d3df65ea49eedd4d332bb06d2937398fdfd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 37.9MB
        • SHA256 73c27f74f6e2b1a832c766851292cf73fd31ebc619d382b792a5b3e9f504b670
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 37.9MB
        • SHA256 630adcc6586ff1ca5cfe04c932bcc5baf42396f1f71ebe546de50903f8e3c9a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 37.7MB
        • SHA256 ebe0638cee3fd40422714479b2773330ed6202926ff79a946c750e7f56543169
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 38.1MB
        • SHA256 6418d228045c8dcc494069a1975011faa6d1402d2dc767ac2c37487690d0cf6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 37.4MB
        • SHA256 d26d1b1e1267c4244f8f5b93d1e93478213154efce1bc3d0c8650f36b8d5013f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 37.2MB
        • SHA256 f0da4ad39cd494610e8032baf8a6a2d140cc6abc319e26e68d0f0fd67f3abb40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 37.1MB
        • SHA256 cb8ab531487dea4800dc7fc7a389a66e74163c54d0028434d86563eb05bbdfb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 36.9MB
        • SHA256 16a247e62e554ec6622ebd919c4595fbe5a9b59e29d10472e936dd9088a398cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 37.0MB
        • SHA256 5b9c768a8e3cee8dcc1c4b799c8485340b498dd4ead581a7e8770385f638651f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 36.8MB
        • SHA256 fdbfe11f079e23c2f2bf5c5cb35d082f7e3026b9c4b8374e0e44e25ad9c73028
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 36.5MB
        • SHA256 146e863e24c8ac8df9ef91150740757bd91f856dc43169d0606b8eaecf132c30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 36.3MB
        • SHA256 ea56365352eaba7114a2c514742560dad0f69d8fcbe08575d78e39de67b27d9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 36.2MB
        • SHA256 8062a1ebbce5f60ae67be27062a8598b17569655567ad52425c634cb06577858
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 36.1MB
        • SHA256 9d972533dfbd2e848959f3da42142bc36cb53222ed06e11b49460bd74a26d2a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 34.6MB
        • SHA256 5c735399eed17b808dc26055372ba8e4e67a01740b2c32682e1dae37a975e4db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 54.3MB
        • SHA256 06762f69f0f274e6694287b1b0c9a48ce6d72a57022a416e5d85becba0c8f09d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3260-28-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/6108-9-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/6108-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download