Overview

overview

8

Static

static

3

2026-08-21..._i.exe

windows10-2004-x64

8

2026-08-21..._i.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    147s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/08/2026, 11:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-21_81446afda0bb8b2405473c14cbfd9d14_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
  • Size 36.5MB
  • Sample260822-nvmb8seh65
  • SHA256 f0ac1532310da66a37273d792ed48c1f154c7199e8b242cea82b0d2a07a5a4d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_81446afda0bb8b2405473c14cbfd9d14_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-21_81446afda0bb8b2405473c14cbfd9d14_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2704
  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_81446afda0bb8b2405473c14cbfd9d14_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-21_81446afda0bb8b2405473c14cbfd9d14_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1136

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 37.2MB
        • SHA256 537010fdeaa68ed487065a9e912ae8be82c91e6c482602e7494bf3c11fed6d4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 73.3MB
        • SHA256 31f24d4f1d25ab100d325a69ae0648ce391007a6604bfdbd89946e9a7852ef6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 73.1MB
        • SHA256 93629e8780ec668c92037e0127de12508d43dbbfebd387558cc22a92d5a631e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 79.0MB
        • SHA256 9e6f9f889096d0896e3a62c281674a7f69b7559aa8049e696206c54d1d4c3307
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 42.5MB
        • SHA256 b22c9e1ada55fe933664710d4dd0b3851f00b4fbf5591e26d7d9daa30f4c6c92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 74.7MB
        • SHA256 8d6ce511fe9c7f71bb359648a86460e1654fc120b2f566fd2815de2e31219e23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 76.4MB
        • SHA256 f6c8e246db653a8adacbf5d9b5380ed8f36e9340210907629906ba45e5602eb2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 75.2MB
        • SHA256 85e780598efc5f61df9ed282ec4798df80e0aa53c90f821c4222b0a325464af6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 74.6MB
        • SHA256 c894d818ba2cdaffcd67f757f4311b4b25e6d7469ba9d98e713ede3e8ac847a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 74.8MB
        • SHA256 5aa3df0b84654d7e549ca2c355df82f38b9c748dcc9c998c3b88db9672136ad0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 76.0MB
        • SHA256 ca2b21e63a39ca420c317cc328e70758bdff6e9b12487a2b97eb5a725921d937
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 74.4MB
        • SHA256 3eecd853ef64a656ac3ba6ad58e205b964cc791cfd3f61a3b3f37e8c859946ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 73.0MB
        • SHA256 005bb6c991c5379bc53afe39835f5399d8ebcdf724bbdfe695c5a2ed7d3b63eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 73.0MB
        • SHA256 59f926d6e1deeaa0bbefd7681520ca619e6519a992edc1779df4c561b0bc07fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 73.0MB
        • SHA256 b122337de28712b2b05a31560bb32e826a5146efcb2c8525a26107d05969d2cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 73.0MB
        • SHA256 441d578034de0f37abce8978b677ca32075a79eec4ff6e4bf6f497fb3005a268
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 73.0MB
        • SHA256 018421aa6e7e4dc3cf5d7d9c4956d9abcbf235641e6dc4ce916e038c3a429849
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 73.0MB
        • SHA256 6de1cdaeac806f1372f35ac7d31b5a17a2caa95679ff8bf2b6340057872d80e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 73.3MB
        • SHA256 ce32174fc5e90b75101ec38d72626a702d4e472ad8be20c3e7871f1a1b89aacd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 73.0MB
        • SHA256 a4c5d20a8b11119129112c52ff329f2c5dcc4cd9512a34e53411cf79b2e0b852
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 73.0MB
        • SHA256 caaa16291d688cbf358655ac7b44b67baa2f8427dc816f1d36a3adaa298d343e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 73.0MB
        • SHA256 84bf7cfa6ec779455f367033e6bee641139f891d8e08035d9084b102f09a4f53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 36.6MB
        • SHA256 580b80d1ab0a40a6bd89ccd96c0551c60a3fa55ab2db583ffbd55bdc00e077d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 61.1MB
        • SHA256 8044bcc4941ce25cf38d187e29766f7664ba3c0e5266688360049c99702eb835
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 55.8MB
        • SHA256 6aa4dce46857ba94a9d70a16589c747f852ec2d4cc3de73b2bb0659195c9b231
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 51.7MB
        • SHA256 797e7d2ea9f43c668083b683b763c0c74652a49b79b0d2fd401246f7105ad386
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 16.0MB
        • SHA256 fefc6810a4391944302d3d347b60b757f11a96e987ef7fb04192c638fb27f130
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 11.6MB
        • SHA256 4aa3f8c32035a8d0aa72b08da1753e536d8502f17c8509d59175cedd1c05df8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 10.2MB
        • SHA256 867590ec82f920347a575d9be975fe65e9462f34517a55c91191768bc85e1e8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 2.0MB
        • SHA256 f0b15554140c6a50600f8137108fcdfed2755a6e3a8dcb34c307eef9083919f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 8.9MB
        • SHA256 1b179c4b7164bda1f8dd18c37227d179b28984c1449e28db9d8b33a4972b578a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 73.0MB
        • SHA256 38d8c491ac4665e768ebc32833aef2b8878f9a3a2b785a246841c2460e69986e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 73.0MB
        • SHA256 2e07e9f86d1e0433eb9a4882f17aea5a1fdb7e0e2a6735c19f580f790f9efc70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 73.0MB
        • SHA256 fb4eb19a9764ead4aeb8b4aec153bab95da0e559233cfa23eef53a14114d8707
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 36.5MB
        • SHA256 f0ac1532310da66a37273d792ed48c1f154c7199e8b242cea82b0d2a07a5a4d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download