Overview

overview

8

Static

static

3

2026-08-19...ca.exe

windows10-2004-x64

8

2026-08-19...ca.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/08/2026, 13:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-19_2e6dd178033f9ce3b6819405fdd99179_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
  • Size 13.8MB
  • Sample260819-q3aphsfd74
  • SHA256 5af39dfcdaf9a98b14537c57d67eb0e0f56efdad02502a662156fca8c8e4940b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-19_2e6dd178033f9ce3b6819405fdd99179_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-19_2e6dd178033f9ce3b6819405fdd99179_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1864
  • C:\Users\Admin\AppData\Local\Temp\2026-08-19_2e6dd178033f9ce3b6819405fdd99179_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-19_2e6dd178033f9ce3b6819405fdd99179_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5380

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 27.7MB
        • SHA256 0b979f67eb5d39476445a2c29db64fdae46e209eb8addc1fb712bfd15e8e4ad0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 31.8MB
        • SHA256 f6c1cb35973546c00fec052fe5fe3f29402feaf3c16a3af2e5fed1c40e14aea0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 28.0MB
        • SHA256 c3da899adc0566349a43dc32602349dadd64793cf6939683a3557d2e72240801
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 51.2MB
        • SHA256 0e5397956089ed7623c76b556bfb094a16392ab41eda7efb1565ce26ef2845cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 16.0MB
        • SHA256 ce57454e10f0b7f8bff7000a9198cc4dddaf81f1632fd9bf2921d744fb797058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 27.8MB
        • SHA256 be39eb1d9983577dd284764bb98b24c45426cc07449f80fc79c6e52fb77575e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 33.7MB
        • SHA256 784a2bee31f221d9c999342ae6a30ebf0b2fef4c6a48cfd68df00de7c3c28d45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 704KB
        • SHA256 e5ac195ed95906c4c7d38e22813edc5f1a0626c9af950926575d44363de6f816
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 29.4MB
        • SHA256 8601d263a69a0fc83b7b10893578687d2e252ebb41042ba07d76c37bcb89e9db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 31.1MB
        • SHA256 c9f1cd18bd230430759ae4a41f5d110b9f0926280c4a73e65ab36bd1c9a2abfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 30.0MB
        • SHA256 99cf4350b7ab82d5316a825c9ab22fde408106d26d12da20b0a4edce05a99ccd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 29.5MB
        • SHA256 7a803db9c41f0a0ca49b5ddff9737c70cca9eb35501cf6269f66f2810cf32d40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 30.8MB
        • SHA256 ca3d14b863ac2d71ffeb577a9499ab22dd37963a1d410b17a364c5236a533081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 29.1MB
        • SHA256 4d7269bb903f93ac0eafa44fcd65d7f565310b04c4343e5ac973bd409e78bd94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 27.7MB
        • SHA256 b52c2bd45b8c22271f03b5ed569d3840f4b264c15665e21460ea111cbf80a498
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 27.7MB
        • SHA256 f749ca969a876cc0b30cbf91fcf532b63749a44f2b32e674d7f2afedb05f858a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 27.7MB
        • SHA256 2a185041ecc25d303f379eb5dd7d4daf8809e104296c9d0300a981f968007db6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 27.7MB
        • SHA256 32c64ad91f00376a50c3c1b23a408273c04a075964ffc5774e7aae76b23eb732
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 27.7MB
        • SHA256 9aef9ec924c1ee1de31481e07828a8444518179dd618f4bad0a100d4961fc3d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 27.7MB
        • SHA256 29bbd3bbef998792b9ffa899dc32c0b3452a64ab15a4c6c3e4b49f0ec5975e6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 27.7MB
        • SHA256 0a6340ff66ace08a2d55f3b0871549945c956088b435ca53db3e207f19aa83b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 28.0MB
        • SHA256 8c789261f71236652910068799b141bd7aa81c4436872c0076a3e2b4e9f85e5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 27.7MB
        • SHA256 68e13c4bfeb1d03abca7cd198d2c4cad66d2709f4335cb2747db39a1cd830bd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 27.7MB
        • SHA256 af5dbc722ae8952e584329606f076aa187100905d3089033a400dde81d6cd33d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 27.7MB
        • SHA256 b4661529fa2824124bc0fe3b0dc14597933d8f1aa5a4a0a9502aaaf73baec650
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 28.0MB
        • SHA256 cb2fe67148772759060eeea102808b3e574782b568b4e777c3d74fb053158c5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 28.1MB
        • SHA256 0320a05d3a897655399cb4c51060cfd98662a2113fbe5b148a5a08d9e796b49d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 27.7MB
        • SHA256 a877d59a08499e02503d30f2197a44d17ff5c6be82b329966cf23dcc429cde4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 27.7MB
        • SHA256 d39ab3a005b2d6b614dd8016821f3100bde8da5eff708176c8ca7572fcef5ef2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 27.7MB
        • SHA256 ebc7d1ad2aee38420f87af0bfe56b3acf08205a916f7f4127d0343de62412ec4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 27.7MB
        • SHA256 666025f19997f925e05a8dcf79ccb162f2cd76c4c38d02bb7362fe8a60681b03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 27.7MB
        • SHA256 7c15ed2e9eb1cf6b3601a09c7419cc4a5496d870b65a0396f6881afbdac2f48c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 27.7MB
        • SHA256 8ea640ff30358838710d2a452f251b8de94768427214687230a20e8dcf807b8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 27.7MB
        • SHA256 3916761d4c51386008dd988471b0e0e7c45316b47003db5d3273d63827a68144
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 27.7MB
        • SHA256 d7f95996af53bded1f31052255d315768431bc6fc7b9c53714402cc2b2b150ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 27.7MB
        • SHA256 c5eed806a261ef44e68d3f0aa83f6af066548c2f9f599f2c0c93b0499672ff53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 27.7MB
        • SHA256 dcb8e13cc51cd07702142d715f034aad83900d7daa846947d1a4433873591215
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 27.7MB
        • SHA256 9e70ffbe84f9ef2b345ba7d2a2518ce5901756ceb4238e39920600ce9b0ef3a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 27.7MB
        • SHA256 0a26f88ede7d19c19fe0ea02a33248d1915faf0c56d5686e583eac93d8b1c501
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 27.7MB
        • SHA256 8fa5db94f422702b499552996e2e7131ed97c19bc6435916f5400acb3e242b9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 27.7MB
        • SHA256 d27132aaf2a9c1c63d6f5f178e6deaaef68a4a6c0c52ce4b0b76d4b7b10c0082
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 27.7MB
        • SHA256 54e07ffcfec6f72bb7cb762e84ae5cb940c4919f2f0b4a34894c5a7b603882d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 27.7MB
        • SHA256 e9642f707e972615b435e9ca0c79271fc5d0f27a70a52f93ec091b8b2aea065b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 27.7MB
        • SHA256 66736392b92dec0942b2dc56c4b96c0ba52c53183871b5b90fc05544d80baf5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 27.7MB
        • SHA256 33e9fa85be65d7d52f37dd5d58ef8a422a204382652573c0857e8cb6d16d2884
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 27.7MB
        • SHA256 83e0c6f752be9bcb26a25bbb772f8fa204b9b12d70ccee343346dd8549a7d26a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 27.7MB
        • SHA256 15179ad9426b9d4cc2f0ef6d891e6555b838fb75ab0f3de7959b314e24fd6cd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 27.7MB
        • SHA256 8f3049293d7391cb290f229fa805ef45e46d17318ffbad6f84da4224c2d6a5ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 27.7MB
        • SHA256 39ce8d8744b8d37c78d955795521a24c4cc428cd023c5a272c87d60dfc1797bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 27.7MB
        • SHA256 9d7f6fe964c5a701d579812fcef9c597e3f4ecf87e16806b34549819b0c608d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 27.7MB
        • SHA256 6e52ebc3cd097650b61f1950af6a957b4c3e37b7b59038f6ee0d7634fb73cb59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 27.7MB
        • SHA256 af8d364cf22230ddcc08979dbf75852c706787f3da40bb1d67eaa2c8d471c68f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 27.7MB
        • SHA256 ce2cac90f252f1f7db7e1e6c47865ecb52478c7e9e75929ed14fbde67b0b7303
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 27.7MB
        • SHA256 73912893a7a903d788519c38af55bba3d1349458484211cd5e71f1d42b4935a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 27.7MB
        • SHA256 153fae2036f04573e7ec16c5ca385fae57ff4de059e8c8f0a83db410f97ed897
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 27.7MB
        • SHA256 298a47f7f58797742fb5c28137658a93d0c3670598cbb91bbb6f394d608f409a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 27.9MB
        • SHA256 42a7e3b84d0bacf57116406dc2ed4a541b0210bf493ae72533b5d3ce86efbc59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 27.7MB
        • SHA256 b622589cf98911727bb02d9f657bb8c37afe640f545c7b142568e81fd7f3a01b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 27.7MB
        • SHA256 0237a2ea15ae2c8252b8ef9455c99f0fe130753ded9eb9562cdc3c138ac015bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 27.7MB
        • SHA256 e131de6f1ffb28a39af0d188479eb31dde9c5de4e48706f7ab97931ce243a99d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1864-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/1864-12-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/5380-40-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download