Overview

overview

8

Static

static

3

2026-08-21..._i.exe

windows10-2004-x64

8

2026-08-21..._i.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/08/2026, 07:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-21_b06b72059c20f23f9b8799b192717b04_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
  • Size 31.0MB
  • Sample260822-jte5basema
  • SHA256 27809531fdb57b81e5b703d14fdb5da69c72061dd480889abcc1fcb394f1f110
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_b06b72059c20f23f9b8799b192717b04_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-21_b06b72059c20f23f9b8799b192717b04_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4800
  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_b06b72059c20f23f9b8799b192717b04_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-21_b06b72059c20f23f9b8799b192717b04_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:60

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 31.7MB
        • SHA256 fab28fe96f746fbadd4d36af07422803a84e3b42d675236ed81010c3980d71a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 68.0MB
        • SHA256 4652caef41902a55524c6d52e224f1bcdc0b11baa9318cacc0dd0134dc8a2eb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 34.4MB
        • SHA256 27eda502b57bf9b5aa86d2897df5a8c93c19016058032f20dfee98527bd51749
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 63.6MB
        • SHA256 0a9996bd1d58f3df4917f404665d04face9849c3d88aa0e67326e693cd55f924
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 65.0MB
        • SHA256 3882f5a3cc79d47f7c54cc8c898b0cfe73aa90732428204be5f667fb23230f1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 63.4MB
        • SHA256 afc0e0f35e159eec76d46995ee776193bf521f1f1ab3b2b051d9dc91dd62cf77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 62.0MB
        • SHA256 d91433de2aa8c0f82406afbb65e19ef8c81466b8ee7339b62f160dd7038c59e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 62.0MB
        • SHA256 c2abb94a3a19b1eb918f097483efca633104ef3cbb8c2747a827a5743180cc56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 62.0MB
        • SHA256 f173a7da6782948953ce379b29390b2b3154cdf8d3a3d772959b3424fdd418d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 62.0MB
        • SHA256 579d02bf5baf28c20224c975f9a0683697947e9477c364a9c30b42f01a15e55c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 62.0MB
        • SHA256 eba4cc86144d8ed6047a0e0176b8ecb0e6ad92a48ae338390e5ffb651d7f1ab4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 62.2MB
        • SHA256 5b297e8395e7e5a721a4a668ee70952db23acc231c887d0d4f5ddac57308e48c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 62.0MB
        • SHA256 b33cc19e1ef46dfda2be9335d0a10dc360a4a05340995a44d58c4838b34aac59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 62.0MB
        • SHA256 c294db87a23cf54acbc0724f38c24d3c15acd7556ae739b3c2587328fceffbfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 62.0MB
        • SHA256 7f6d1c5b592ca4c8d169a33049f5a91cafbe7018ab89d4f90801c8e63442c74c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 62.1MB
        • SHA256 7ed3722ef161cabf7fe5c69eb20ab77459785dfa9d6b2a6311f9ee0e03bfba6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 62.2MB
        • SHA256 7a89ee60c0163226ed8c618f79dc371198757cd0d9963a21501e9142353edfc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 62.4MB
        • SHA256 aea0ad90bbf9b5cb9544417efcb73766011e003fb17b24cff905059e9a3d4039
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 62.0MB
        • SHA256 ea87f9127d8c1dfac04ce91a819b2cac9980494b7b8002487ec368e40554fba2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 62.0MB
        • SHA256 4efcd028f8e0b45ef44b74fdd41165bef924a601c3f9c418db314a29c8c504e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 62.0MB
        • SHA256 9d238f4ba545c01bb8ce6d1befbd09fe34c2ae394bad7ae5145bbfa715a32b4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 62.0MB
        • SHA256 fbbf910e5bf19c6c054d3246026e9c7771cab004e3a2e2b4388c2d3aad574d58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 62.0MB
        • SHA256 af245076fdfccfb1ceae0ce22aecb51b8da9fabc6d8ec1dc229185044dad261e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 62.0MB
        • SHA256 859b0ed1c178e3e56944f8c0cee9b959ef2abe7692745acb495ac05c1375b3ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 62.0MB
        • SHA256 44ad5c7aa242b583d991f8f9f1794e7c6afcacad383829caf7f2d1fd01e1f3ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 62.0MB
        • SHA256 218a75dfde44873d4ec129eac5c9867045c6fe7173a98fe6c7cd680a0506b5d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 58.4MB
        • SHA256 52fa5767ba2e747dcc6a0e492fabc3f9e91cd24e8fdec1e33dc1ff75bd68b1f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 36.9MB
        • SHA256 e5ca7c0912e8147cb6ea61dd0910c72a0f00560ad03f63faaeaf1ef2cf6ba3b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 47.2MB
        • SHA256 0e015be848523ca64bbdabb77a6d6179983956ab2cb0317d29cc789235966a66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 46.9MB
        • SHA256 5c1e3dcf3d3d64690a1622888fc8a8e12f2ef38b43d414cfe90ff50fcdf6551f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 38.9MB
        • SHA256 b9976621495583fe8a360a5d3e479cb631850916b60c7393d964c8558c14d25b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 42.1MB
        • SHA256 36d8cdf45db8670663b09c79067be9b1722e26ed8dd196dba30666d6d74ef011
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 40.1MB
        • SHA256 ebd5358cec2b9b9293109ccd2f441c12a534e645c7724b37aa4d591ef4517c61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 31.0MB
        • SHA256 f82cd353186d3ab73b8471760fe20d1529829d8c0cd7b4f8116f852c81bb27b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 31.0MB
        • SHA256 27809531fdb57b81e5b703d14fdb5da69c72061dd480889abcc1fcb394f1f110
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/60-6-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/60-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4800-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4800-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download