Overview

overview

8

Static

static

3

2026-10-22...ed.exe

windows10-2004-x64

8

2026-10-22...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 09:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 12.9MB
  • Sample261024-lpskysef89
  • SHA256 c0ef39d9262cb403e6e6cd3cd989f2d2c37b4e1e00805b39a78de7afcefe9fc8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2448
  • C:\Users\Admin\AppData\Local\Temp\2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4596

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 13.9MB
        • SHA256 82aeed11f4f434ca634f350f0b84b390b9ccd9f19fb6f2afb401e0f4b099e92f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 12.9MB
        • SHA256 3055373756f54ce2134794c60c8f7f215ac3fb3c6758dd0a28d9945da531e238
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 13.0MB
        • SHA256 12d263042d4d7b0e4d9960fa96461f2165f5fe211c16b4f2339f7546d8eb80f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 12.9MB
        • SHA256 12f1f6df68a5a7c59c891a29daf2633ebc0c9453581681021bd6daaf1b63055d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 12.9MB
        • SHA256 d07014c301ecba55310727e895fe259873096a122c33d5dd42a41a9823ec83d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 25.9MB
        • SHA256 f173dbc3af4816f053c2ab8f3f0dac71eb9f5d6f16616c9bd778c798d51eea79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 25.9MB
        • SHA256 169954ac7ccbace39fee43daa3c92df941904fdaafe404e6ab3e86168bccacdd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 13.1MB
        • SHA256 792c36204eb1d6a01eb37dbe958dfac6e5ccc9037e1c07aa855850858195ece0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 25.9MB
        • SHA256 ac02c95eed99d4639eb9deb8537035f7f31419e3dce425fa610555d29b6a65dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 26.0MB
        • SHA256 1c51d1f228332d68c1fbc11c6873e1b473108bb48034f016c15452aa72e69cc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 26.3MB
        • SHA256 203fc2d69bcac67922c107eee907f8bb136ff387bffcb806416ac0822cdfda61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 25.9MB
        • SHA256 163e6c31b89898354698043bea8bd4b5b1dd96d04a1f9daa5a943665dfa85862
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 25.9MB
        • SHA256 51da1eb7de4e573859ffb471a5a1102212d751d934a08f69b529ac5065bb76ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 25.9MB
        • SHA256 a26e76a4829babd1040ac46167a36a26ec9ef0ed8ba90432ec291cca130fa4a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 25.9MB
        • SHA256 24a91d850e090e174c89f7456064ea5975448265282c7bd66ce30e8b5617b7c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 25.9MB
        • SHA256 7ff662d6c86cb46a8e274dafda19f7d95f71a7940c086f09084323d74ec58814
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 25.9MB
        • SHA256 8db66ff27e630ade0f44a58deffd53576c200901b2580012d6c599eb17f45f83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 25.9MB
        • SHA256 435c42ff49440024c15be2910e3de6fce3db3d750f473cdac22bec2b1b9609be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 25.9MB
        • SHA256 1bbd0c809ce8385c2229ff17cbd9516623a8763879083b14eb3b6860ff2146d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 25.9MB
        • SHA256 f75cfb5d79a95afb527213e769c62e464765b2a56ebda0b158dbdad94d08b27a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 25.9MB
        • SHA256 866253a361ce16593479fd4b5daf34b52bdf2f13482cc6ed050cb88f2c0c2bc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 25.9MB
        • SHA256 052c8b601efffac475e81f3fac14cd8297a19e22b42a45c0f093ea090a4c7ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 25.9MB
        • SHA256 3c6fcbd712e69bdbb3ed6471c6970f2e65dfa6e98c4e416165b4911481cb7b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 25.9MB
        • SHA256 f02ad55353213d8fa3b4d0b52d6b1fb37149c4db4ce518acce02eae36f39fb60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 25.9MB
        • SHA256 28339c7bd4c5f646d4b1328133b818580fdcdd8b6c3cabcbb4c2667b8d641f70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 25.9MB
        • SHA256 71d0145eecf3f5ec8e549d833d4813d7cf034d19b47a9c0560d2b7138eaad8d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 25.9MB
        • SHA256 66f4994cd4a4d20a9305b1af9866283d71cfed2070c614cd21f900f5295f3015
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 12.9MB
        • SHA256 6c940f3f4a5f3c5e7cbf8f89a2d2af5164b0abfd2a1c543de80cdcc5319cf727
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 25.9MB
        • SHA256 a756e5df9493d61315a76dc8591cd87c319d822d14efd2080b90f7f65d78fa34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 25.9MB
        • SHA256 2d7163c7dd7edc7c3d763d68309a96b58fe1a02bc6734cb78e1e71899603bf69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 25.9MB
        • SHA256 21d0b8dd3063a727e8e9a9602ad69ff8b07110b898bf9968647cde98cd9d4ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 12.9MB
        • SHA256 6f1161144822a115c1786b581daae7109554a2fdc73524be8be0573a1c2d06b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 25.9MB
        • SHA256 f24ffd624d664863adf667f926b3daa15084fb80e6c43665d9e34cb0bc836c8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 25.9MB
        • SHA256 3b18d9027c678c4b3dee668ae3c4098d364e82b13165de39e938de2d0af02dca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 25.9MB
        • SHA256 be7bf8ff4d0c815018931a6c393c9c356b592caac449b3efde1db5ff73713811
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 25.9MB
        • SHA256 45bbd9e3a5ffaf74a831ebe7a0773a6e4edf6bc5765c6a0c5d326de525d586f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 25.9MB
        • SHA256 3691939cc11743e64888a54b8e112ffa3cafe4e08b39c9b0b040c60be38a8945
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 25.9MB
        • SHA256 041f2450f3371c9609a468467a95d5715dc56bf12c77059efd4b852cc5d8ae50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 25.9MB
        • SHA256 0cf22b962ff4e82aa09ef657a7cbdf602ff3bbf112527cd2db29f1ca5bd3d7e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 26.1MB
        • SHA256 e83e00482f0b295cc2e7929a96cb1474dc12596445c0b2b78010266ed4864753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 12.9MB
        • SHA256 12709f3252807585b962114640d2bc48caf5ad6275b2fcf7d2456b146be072d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsimport.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
        • Size 25.9MB
        • SHA256 1020075db06d2dac6ee3b722301f1ca5fb3d18964a00c02b2e90ba96e602983e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 25.9MB
        • SHA256 1aab78181c6e3d871e73b0fcf07a0ac08c73f403078aa17b50ea9795bb8051d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 25.9MB
        • SHA256 b729659fd44f0613e44bd40d4d13c8278397e60f2d3657e99357369a2549873a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 12.9MB
        • SHA256 f65895b0e52386ab7e7d31683128a89def4d957ca5aa2664ce0bf2598daf43f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 26.1MB
        • SHA256 d42e2af950ef3756b42e38c56c4afca7b95aa69b09056c20f5f3ab2b702445b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 25.9MB
        • SHA256 618018a4e4fad0bbdea5759e95193468d9b68c54729b7a83b2849c50510ecc9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 13.2MB
        • SHA256 8af19a7714f19343f8752cc1ef430d33df2c3e828e1b5187a67af4a454717b31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 26.3MB
        • SHA256 07841cb44266a833b96e9ca89438f42f2204a6c27179c890b9ddb3a04f9a8763
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 25.9MB
        • SHA256 3c3cfa99df42db6a52ebe4abc87663eab37faf1a75ade6b067484e83fe1a952e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 26.0MB
        • SHA256 759aaadbcd634506db51fefa0c05ea1af116200e0c958ed04ed0c010738e7dad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 25.9MB
        • SHA256 cc2d270d0efd6ef9c3f774038f9fbce772fc1f1c9a0747e53883e119ed343e4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 25.9MB
        • SHA256 807e91505c750c8fbc0dad4c6b57c5a5e5b930fd31a5818e8189cec99aa3fe6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 25.9MB
        • SHA256 521c8d11553058ef73f0f1c99da1c1ba0b9a448a4c9a939e5253c2644b64396c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 25.9MB
        • SHA256 48a177d2aff1597e4d193cc7c92acf9d61ea6b3d7e913e8b81c6e937a10fa083
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe
        • Size 25.9MB
        • SHA256 928aed6be5555658f57337c49a480a91af80debbe2867004376074251d3e0098
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 25.9MB
        • SHA256 25645f3f2f9e5288e02e6ee9902a5b35063a533c2153e687a89bb5433420d351
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 12.9MB
        • SHA256 dd412d7bc3fe20cf556eaaf67e859c0f47863efc7d402a70796af3c99ec91947
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe
        • Size 25.9MB
        • SHA256 ea8a1c757c010535650a519e8cf33beead436def0bcaf8ee0b31f622332e3b97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 12.9MB
        • SHA256 c0ef39d9262cb403e6e6cd3cd989f2d2c37b4e1e00805b39a78de7afcefe9fc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download