Overview

overview

8

Static

static

3

2026-08-19...ed.exe

windows10-2004-x64

8

2026-08-19...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/08/2026, 22:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-19_883f39b7b42154f95e89df9529db0062_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 7.5MB
  • Sample260819-2f3mkavdkf
  • SHA256 112a111159cf79481225b3858ce74b798f299a4f988d383b6b6e92e4642bd93f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-19_883f39b7b42154f95e89df9529db0062_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-19_883f39b7b42154f95e89df9529db0062_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:960
  • C:\Users\Admin\AppData\Local\Temp\2026-08-19_883f39b7b42154f95e89df9529db0062_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-19_883f39b7b42154f95e89df9529db0062_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 8.5MB
        • SHA256 d92fb65fa5e9d44754e7c37e0269c52d199209bcc58de560454b6461194825c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 15.0MB
        • SHA256 0a37e9c6db2d2a3396f82972f9c75f8137ecd0f32a6bd098c7472822d7070c87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 15.3MB
        • SHA256 d31a35cd40254f955807ab03e7a9120052791435a242fa29997e78e0cdff00c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 15.1MB
        • SHA256 f02e079bf87a626c0a75beaa9a3d41e769118ebff496cc3ace4e9d02ce2a2ca7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 15.4MB
        • SHA256 649e4fae27f76996246de05547672ac89edf2ae24a2a5d491fdb63c3651f6003
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 38.5MB
        • SHA256 282e8a38d44447e204c29450ee52f37baa2ec0ad8369ed3fd5152dba55428096
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 17.2MB
        • SHA256 453fd2247f9b88ce75f663112801843c749847eaece5f10d5c89bc8e4ed9d333
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 15.1MB
        • SHA256 be87acc01fcb6047ed997051fdd710477ccd5ab4f3eb7939559bd1088041c288
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 21.1MB
        • SHA256 92e1d6b351fa5a4681cfaa1aec25be061015e2f1879e9596e7b7c1ff6188e029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 16.7MB
        • SHA256 4d920cfd07f2bb540bf46c9873b2350198ece5a206dec729fd4c15ef96a8bd21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 18.5MB
        • SHA256 c58a3874708e869700f90688cd0acdb27f6eb4b64fccc125e4cdddb69fa1b818
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 17.3MB
        • SHA256 6a826737c26e04d42a3aeeaf2e93bf9c428f0c81e974208688b7d6abd5a023b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 16.7MB
        • SHA256 14da1270ffbfeb065b1223c1d84bd8693f6ada5f93395769c6c2d642ac5a28cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 16.9MB
        • SHA256 e7f0c7e1b8d6c60a2d919951c46fa28aae358787660a42848e349beb5cf23209
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 16.4MB
        • SHA256 6b41b2f8d23f3705ff8aa6ef7a065dc10add95676a5adc39ae6fc14627577281
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 15.0MB
        • SHA256 808830b550338b4ce8d64331f0bd0283e166ac35cc49122e982d41f7e3d1819a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 7.5MB
        • SHA256 77537deb6f3c4ce5995b43acda837502d18f8ebbd86bf023f9065bce85a28abc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 15.0MB
        • SHA256 01469043461addd7753458d825bb2919679ef94998792cf33e7d39241269ddc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 7.6MB
        • SHA256 a3b71e3276b76c0596ba37b84152d3129bae1cc338e5e5faf8a4fd43b59c4c05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 15.0MB
        • SHA256 79eaf71f61e0dc1a70db9dda7d7da68680d4b5dfe7ce8a1bfb21d2dcb545d4ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 15.0MB
        • SHA256 2ccc386f7ed201cc54bd5a4615febaebab7e13ebf8b5d1061dd7b6caf4fdd696
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 15.0MB
        • SHA256 75bf5e8446b6c2bbf0329f20a6ca370313fbf890d1d38219503b4b0e3292be02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 15.3MB
        • SHA256 1fe9db7ce1aa8e60d0f04a38797f4ed55c83e67a6dc0fdd80615187abdd98f92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 15.0MB
        • SHA256 7e4635f7a1b1b636be9f9b3b86633a40bcc0210608fd2ce0fb3af6338455f26f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 15.0MB
        • SHA256 0a6660661da1dcf0ad0f256f478e1de6241e1f4ff77b0475610d07b2cce6f3e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 15.2MB
        • SHA256 6ec8e951599f81660d555ac8c197ed317ae6c09666bd08d7f3dc7c5990836ab6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 15.0MB
        • SHA256 8166a3c26e0db94ea1dd2cb2ae7817f6c9a171a9ae44c59cdf7d11f8ee0cb712
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 15.0MB
        • SHA256 d3c3f3efa8f8af19b785219ec7af4aa10282319453cc6cdd6a6005bd4b1d151a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 15.2MB
        • SHA256 2997c3b31bbf992fff187dd37433fc6070c523e24a283fd638df0fdaa23435ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 15.3MB
        • SHA256 4f06566894e97d02f809c33477efff7bb5930242eda602456c0a514258bb04af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 15.5MB
        • SHA256 f4a6c06cd9122c5a916153e5a6f07c3111d46c361bb117eccfc355c847a3e185
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 15.0MB
        • SHA256 4dc30b99d627d95d26db93eed84592ddf0f4b85ffbf8cb3d85e7703cbbd67891
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 15.0MB
        • SHA256 debfb2462fca75144a4f43970e26ebf0d87d67551ba54555f1c77a6ce6a52f47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 15.0MB
        • SHA256 7bb03bc81e415acb437ef715bbb9c2aa7a91f637797887c9c0ea67bfaefe48e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 15.0MB
        • SHA256 f360a238345ea59106fd817df571f71afcacfaa36786c142dcd7cceb50b9f3a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 15.0MB
        • SHA256 1e351c98a11a156733cba933ef5ace31292dbc2b6c6208881bd3ef1acc2f46e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 15.0MB
        • SHA256 eb5bfe9fb6653fe65dd6d60fc5b08eb0bea08fc950c9f27c1341b8a9adff4e78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 15.0MB
        • SHA256 056e9f222f573481492955128a6c0502812be4d6e49243935b9a5aaa1789e382
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 15.0MB
        • SHA256 9fe655efc661ba28fd5f2abaf534e342899104fd51600651586309241356db90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 15.0MB
        • SHA256 5ab99fdd21def1af07d16a72b8478109338802258c75e9cd91bd7e46c905fe1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 15.0MB
        • SHA256 4bb08ead8ba86f01d42c25028f0e20a4b1c16f028162018f62a71ce7f6665ae3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 15.0MB
        • SHA256 bf93944e55ac8917117e6923c14bb0a411db7ecfa06b6a70fcc6c565a489d36b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 15.0MB
        • SHA256 1fd0068297f0ede4d90f7e1cb81717297bfcd837430a1ab35dd4da0af2c5c5b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 7.5MB
        • SHA256 614e6a60a9266b712e498eb1c72c2d06bf8390dca479b201e4b223f74ac6cc44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 15.0MB
        • SHA256 48f39cabb7bba94ba4d361a52b47a88636f6c190aa9e1c1762b74d70f64f191a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 7.5MB
        • SHA256 ee8360224a9efe73b54f1f4f7a214c788b8ff43f9513e9a38a998b9cb45f2161
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 15.0MB
        • SHA256 5002bd89ac9951f25d5fa56e3b805e8b80c730b2b2f2d5756cf47aae46c7df6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 7.5MB
        • SHA256 26df8498a9dc4c8f8bc088696ad8f3dc5d68eaa196a6a55a269140b4ef6ff6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 15.0MB
        • SHA256 1e0c0e6bec2f0dbbd74f7869297815fcd7c6a93d43be1aade3946bfdea22b6d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 7.5MB
        • SHA256 ff3fd46084600b9b79159d79183d4511ec9374deeb49c9be2ef9f5ac5458ca5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 15.0MB
        • SHA256 d5c2453ebb6879d41a3c602884f68753bc4a4f2cec7812513864aad2605bc3ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 15.0MB
        • SHA256 fdc20a5f5649cacea2f34aa3bea273438bbc7a45bc972e1e3e2b9b61480ddb41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 15.0MB
        • SHA256 427f64e30ce42e87c56b1ca779bfec0a528c576441985e026c292421b883824e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 15.0MB
        • SHA256 7dc41ce624da3a12f324497c6cee81d1074b1ea50d5c4e23d61c3e479072df88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 15.0MB
        • SHA256 4ee935d7b0b6f261752765d025f097a2c17e49604648042f32e3ee5a1090d905
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 15.0MB
        • SHA256 a45d97f8d41007ba79b6490959744348b670ce78352d8a34186c72912e9c758b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 15.2MB
        • SHA256 143f433b703eaf8b6878fa53d6c40c6fc0f5b523c9f14fbbdd7ca172108e4941
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 15.1MB
        • SHA256 84ccdcc745140e3f3dc538bef4c2cf15361fe290c53b4322a6b460b3e36efdb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 15.1MB
        • SHA256 4a39b37a45c8309f43512c4b00235238539389c41f43a1f9d089c455f1aadb34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 15.1MB
        • SHA256 6205e98789155ac7059ce0f9fae9d0fc6110a188a79ed8b9fe30cfad38bb990e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 7.5MB
        • SHA256 112a111159cf79481225b3858ce74b798f299a4f988d383b6b6e92e4642bd93f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/960-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/960-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2900-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download