Overview

overview

8

Static

static

3

2026-08-23...ar.exe

windows10-2004-x64

8

2026-08-23...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/08/2026, 15:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 9.4MB
  • Sample260823-she5lsaf33
  • SHA256 d07898cc1801fee211c6cbd763f86ff688139ebf5f9ceeac0fc876afeea9a062
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4168
  • C:\Users\Admin\AppData\Local\Temp\2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1080

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 10.3MB
        • SHA256 dc2408fd1d6f367713deb19c074328e5e12144c3f8431ccfa63ad69e3acfb598
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 10.0MB
        • SHA256 9e0737b1a933a42a69e2ec7c9d691247de84a8d16b8ab9b684522df25ce87c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 11.5MB
        • SHA256 b87c66ca6006688e4ceab9558829a3469bc4bb2ad13a7a63e8ad05a078609217
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 9.4MB
        • SHA256 822c17a2955a9a7fb2ec94ba8be8dba8d0eb1e07f284b743099d377779610279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 18.7MB
        • SHA256 552f41153e16fa7e180b01aa61d1bedb19a7447c5844851b886ba94f38033c93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 18.7MB
        • SHA256 83e9b2c1a8b557c541ca78c2726779851281ea03686d8f46b700026b0b235fd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 18.7MB
        • SHA256 d6de49c97c0a4e474d000cb5dbc778e95c11b38d604852b9facc46ead19a5033
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 18.7MB
        • SHA256 049a94aaa721e09a508f58eca2f5a658742c2db37c7e97f3b271533e426689e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 18.7MB
        • SHA256 162200f2180d07d8264ea99c1483e78295d0e59ba49da3c24725ca40d628c5d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 18.9MB
        • SHA256 0e4cd5f6ba67e47c06b9a427d49d94ee5a186fe2b1a3a000f060a80389660925
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 18.7MB
        • SHA256 a42e6a7bf453376e4b8bcdfa8f466ae52ba72a5f21450af86fa6799453a1ba9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 18.7MB
        • SHA256 5a84bf0f3f6ca5280490dd8753ccf5713c646a0b2ffa8c73253406ca8514dd0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 18.9MB
        • SHA256 664650b4d147b9bc8f7c691e3bfcdb7d7eaf3ed19c6bb0641f5a156c86378159
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 19.0MB
        • SHA256 2ed932b85a926246cae49df145227f5707e39b2182dac94ae03985ca4496d720
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 19.2MB
        • SHA256 ee34c93908099ad0b554c533d297166ffc1cf65e9c54a4fabf1db084791726bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 18.7MB
        • SHA256 fc57599a6b46c7fc90ad973f0608a3f472ac05ed22f0d554eb829fd2747a6831
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 18.7MB
        • SHA256 c527227d7f093d99f525d18f20b35ccffce726ec29715e1d5b1574f61c9fd1e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 18.7MB
        • SHA256 b90f9c621e7052a09c86ffee33347a194f7cde30d95f878eea685471b450f5d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 18.7MB
        • SHA256 92d5e55091211c70742b3d8b01b1062959bb2d5b9d1b0e8ed8b0427641618bf7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 18.7MB
        • SHA256 85d817d2016d68d4eb37a4c19b6d3be1ae47c1f9a3b8175a4aae91478de98ca5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 18.7MB
        • SHA256 1cbf4e5d99d180cfd8ae64e8074fc4b289ea390d1d62a96207ff69ad3e3de8cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 18.7MB
        • SHA256 6c8946369f67d0e9f3da10e796fb3e155a3f1d2725de6e70ad96d5fb45ddcebb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 18.7MB
        • SHA256 02df6729f5dc96681d78bbb64db211a093762fd47e20c67000e3d22c1939c5df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 9.4MB
        • SHA256 21b323b9baf30433c15350b645f993b219ff96e1eab77839b55a142be0072bf7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 9.4MB
        • SHA256 bba0f05f6facc763361ea7f772a08653cf0b575fbfa17f51ff1d3a6e60a7c40d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 18.7MB
        • SHA256 47fd7b978e3ce5d8ed01d2709dfe5b461a3a2a5e04d034d03b6e621094eafae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 18.7MB
        • SHA256 3856fab171dc9a6f3fe3d5298c77b302e071dc75b073ea6c93db5da625e076e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 18.7MB
        • SHA256 eb2a473f498396da538d365594ca1e66f717fb8b89bc2cfd059b943d9561ff59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 18.7MB
        • SHA256 13b1986e0c2bd511c17db3e2aa169f398f18393712656418a765529ecf3e4f26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 18.7MB
        • SHA256 cfb0daa1fe9707d9789eba46c54ea9a4ef9e95205292621bfdf36603de1143d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 18.7MB
        • SHA256 357475e6e25bafe34cd6843ebcaa1d59c37ee4cb6cb5d936a66f7a324bede276
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 9.4MB
        • SHA256 5301ca057cab05ac8ee7ee0192201ece5a7fcbfa60ef3fa718202e0465e773e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 18.7MB
        • SHA256 183f877bffbe2a07c142129623563351d0d00f4fda7ead5564237cb37e3dc2f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 18.7MB
        • SHA256 514224d9302e70d0d448e31a75e7eca3b36daa77b7003a9387447de745ffdf8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 18.7MB
        • SHA256 f7538ab82d699f2b732f66175c8e6d57d24b184a2a89b4cc98e95b5770b1fcc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 18.7MB
        • SHA256 e40d1b095373ccdefb16c7248d5369fd2f5ae3f599d6a26496415eb34aa64967
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 18.7MB
        • SHA256 c516c471af8f27d411abdc55e3ecb140a6dc13952a6a2ee86514f0924aba9fa7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 18.7MB
        • SHA256 7d41ca0451307888e1d76052e5fd6325d9009c267cd1b5dbb6fcf8ac8eecfd94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 18.7MB
        • SHA256 2f308e78c697fb534f90dde5c644f85070a8bee23ef07018e1f2c71a3e2e873f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 18.7MB
        • SHA256 aa2bfd3ec22b50145108e06cf4208875f446e694cde6430ef5f25291322ec8d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 18.7MB
        • SHA256 d817879844401c2ea9c76a8abc9a1be6e4a15a3ef1bd1711b4f10eebcf7a291d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 18.9MB
        • SHA256 68877415b8fff921aa7042a417254de74435a9cb29a4e8c3c73307a0e3a187a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 18.7MB
        • SHA256 413216344d537850c308b83bed60b5e16734fce51228e560d97bf568106b1cbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 18.7MB
        • SHA256 5e6f7efa41aac1c2df5069ae0b44a41bd024e0b80ba11598db9a85f5985988e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 18.8MB
        • SHA256 409e3398665b5fd81014eb7221e864d98f6ae7f3b3c188df11199ec2d57359cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 18.7MB
        • SHA256 01c0d7e50af02081e0f272b276de6b4102539a7e11842b6d6af051edd6771842
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 19.0MB
        • SHA256 1a8411391cb2248954a1057c4fd2dfb2a8e61889253c90bda58992466ebe2d91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 18.8MB
        • SHA256 8190ab39c8e8d755708b70bb3605ee61a1d25df2b17f3ade1238b116eb571084
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 19.0MB
        • SHA256 e70dc491916bb296ce9d16ad63dbec094744e8882fbd7e43378fb21bf78a9f33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 19.2MB
        • SHA256 49a7071386e754f44e47c7ddd9328b23b7d8fcbfdf97030e19654f32d31cc473
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 18.7MB
        • SHA256 bdbcf3b788be21964edc6f820f3bd8a7d47ebd9cd05e83f537e87bc196d10d8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 18.9MB
        • SHA256 3d191b2805867852266950b45b0f1eaf66d09565e4ae2cbd1e7f591fefb623ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 18.7MB
        • SHA256 111018cef9e2076f6a4e4303d023e86250ecfb9cfa53b5b9a650bb4ee210568b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 18.7MB
        • SHA256 8604cc53e6f82c67c19220a559954bf8a6dd7fb8a6760b5845553e676db99590
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 18.7MB
        • SHA256 2dcbc06a4fe6a26a1a9bacaa2be93f220eeb82d10f36f2b8a49ce1c736781aca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 18.7MB
        • SHA256 7da4f526123709157f9a3bf6e723dd8c3136bdcb4c0cfaa7972ac777a8cd674d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 18.7MB
        • SHA256 d03830d231e47aa58c4e75b65772f83e51f4d6a605167b715fe5c531994b6cf9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 9.5MB
        • SHA256 4bc3db9fbd868040deb9465432bf0cb46276c011b0cfc5175e2ccd6065ef30a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 9.4MB
        • SHA256 90882c7deb441acc4552f24f29c5bacde3a952e6abe26cf2cf16d16acde3c737
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 9.4MB
        • SHA256 d07898cc1801fee211c6cbd763f86ff688139ebf5f9ceeac0fc876afeea9a062
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1080-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4168-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4168-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download