Overview

overview

8

Static

static

3

2026-10-22...ed.exe

windows10-2004-x64

8

2026-10-22...ed.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 09:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
  • Size 12.9MB
  • Sample261024-lpskysef89
  • SHA256 c0ef39d9262cb403e6e6cd3cd989f2d2c37b4e1e00805b39a78de7afcefe9fc8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4912
  • C:\Users\Admin\AppData\Local\Temp\2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    C:\Users\Admin\AppData\Local\Temp/2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3352

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 12.9MB
        • SHA256 710d22026886019c98a332f74d903da9b855d64642ddeb0eb558aebddb63040d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 26.1MB
        • SHA256 ccf115dad22904d8e8f114b66b5645c6c45b5e5852d041e2b306946d74ba3138
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 25.9MB
        • SHA256 2b421ca8da7a4e9f1ec5d7ce5a44a07000b46d675c93b6dc005aa6a37f28bf44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 29.9MB
        • SHA256 99526bf98eabef930a732f926ebe553c91b310b38a8142625d9584738ddb83a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 26.2MB
        • SHA256 04561fe4c7f28ea204d29a0a13051a95cebd68fcd441ce483c66aa9b698632da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 49.3MB
        • SHA256 bb7a5d005e77fa1357dfa7499973bb262e37514594f404cd35ec77fd30e37de8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 15.0MB
        • SHA256 f990a7f9a60516b955b7a336d59abf4938208b5946243b7c887db4b231fcb62f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 25.9MB
        • SHA256 4f2a6e506b49018a19f34284b233ce241b3b8efa4eda236185468b954c05107b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 31.9MB
        • SHA256 c7aecaead5b0fd8df1dd69c02e792e10ddd1e9dbe90e43aa4805893c8a98f4fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 27.6MB
        • SHA256 27f554c33bf014a7e19f5b3b7619e7d97f93b829064b438055c5eb432d774955
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 29.3MB
        • SHA256 83ec0964ab2ea5be2fbae33665184594c44f5938843983fc3279b0a5d51434af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 28.1MB
        • SHA256 317c78bc5ba822b675da5dab334064d6ea153540e254526efeb29a425773603a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 27.5MB
        • SHA256 fea115adadb823d68904f37d45e5c6b75e85ea36766d239f66873396752531f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 14.8MB
        • SHA256 c6dceee93b391b4dee3852b6bda68015817c903943e24a53b8922fcedada67f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 28.9MB
        • SHA256 18a7d2cb67d26da65814ecf0e06040e980c727268188b69e2cf9edc001a77263
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 27.3MB
        • SHA256 11d6dcec780e14781cd50425b3def1318d6fafcf81912e1a34f53025c29c3eaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 25.9MB
        • SHA256 fe0b51384ba308f0151d5115ae60cbcedace80d55a63668c2078d8f2ec310e33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 25.9MB
        • SHA256 89e1fd6259e4021a670917ac149acf8cd5defebba1e02cafe4abf548a1fba022
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 25.9MB
        • SHA256 1eb42d324f8853c89b98add49931b2c7e734ad79b51590f7b30575483ed4d420
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 25.9MB
        • SHA256 4a50cb4445bea4846b401d6b517650e64d95598e9cb162611015b5033d675cab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 25.9MB
        • SHA256 d5427c4a729369158f9ab59e4d065c94f2ac071cad0e1b8478507a0bbfdfc1db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 25.9MB
        • SHA256 0a6486cfae1e74a469b0a60f50562b1b3f708321f834917faa04df30370f3127
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 26.1MB
        • SHA256 e9583157cb7a180037780b200de5c62db89fad4ec6a824eca93326cc82a863ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 25.9MB
        • SHA256 f173dbc3af4816f053c2ab8f3f0dac71eb9f5d6f16616c9bd778c798d51eea79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 25.9MB
        • SHA256 169954ac7ccbace39fee43daa3c92df941904fdaafe404e6ab3e86168bccacdd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 26.0MB
        • SHA256 b6d97a17401f454562270f70348068929fc87f4754bd8d5a1b68e65bcf71fea7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 12.9MB
        • SHA256 af733c52348d210c36a92f3ad4b655ea43542682f952a310e8fe1a469334900a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 25.9MB
        • SHA256 ac02c95eed99d4639eb9deb8537035f7f31419e3dce425fa610555d29b6a65dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 26.0MB
        • SHA256 1c51d1f228332d68c1fbc11c6873e1b473108bb48034f016c15452aa72e69cc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 26.1MB
        • SHA256 72fe010d7bddd14eb0d08ea2f0f3773815bbb25d316aebbff74513e63066cfdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 26.3MB
        • SHA256 203fc2d69bcac67922c107eee907f8bb136ff387bffcb806416ac0822cdfda61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 25.9MB
        • SHA256 163e6c31b89898354698043bea8bd4b5b1dd96d04a1f9daa5a943665dfa85862
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 25.9MB
        • SHA256 51da1eb7de4e573859ffb471a5a1102212d751d934a08f69b529ac5065bb76ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 25.9MB
        • SHA256 7c0d43fedf2f64415c14880605c3e9586508c9fa9234c68be98f91f80691d89d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 25.9MB
        • SHA256 a26e76a4829babd1040ac46167a36a26ec9ef0ed8ba90432ec291cca130fa4a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 12.9MB
        • SHA256 c9938079692e299e2dba1e1a87d014949ef29c3d107c3122ef1ee5f2cd8e97b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 25.9MB
        • SHA256 8db66ff27e630ade0f44a58deffd53576c200901b2580012d6c599eb17f45f83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 25.9MB
        • SHA256 435c42ff49440024c15be2910e3de6fce3db3d750f473cdac22bec2b1b9609be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 25.9MB
        • SHA256 1bbd0c809ce8385c2229ff17cbd9516623a8763879083b14eb3b6860ff2146d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 25.9MB
        • SHA256 f75cfb5d79a95afb527213e769c62e464765b2a56ebda0b158dbdad94d08b27a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 25.9MB
        • SHA256 866253a361ce16593479fd4b5daf34b52bdf2f13482cc6ed050cb88f2c0c2bc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 25.9MB
        • SHA256 052c8b601efffac475e81f3fac14cd8297a19e22b42a45c0f093ea090a4c7ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 25.9MB
        • SHA256 3c6fcbd712e69bdbb3ed6471c6970f2e65dfa6e98c4e416165b4911481cb7b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 25.9MB
        • SHA256 f02ad55353213d8fa3b4d0b52d6b1fb37149c4db4ce518acce02eae36f39fb60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 25.9MB
        • SHA256 28339c7bd4c5f646d4b1328133b818580fdcdd8b6c3cabcbb4c2667b8d641f70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 25.9MB
        • SHA256 71d0145eecf3f5ec8e549d833d4813d7cf034d19b47a9c0560d2b7138eaad8d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 25.9MB
        • SHA256 66f4994cd4a4d20a9305b1af9866283d71cfed2070c614cd21f900f5295f3015
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 25.9MB
        • SHA256 fe0f4899f84da2bf964bbf29b3a9c6cba1a7c8b1acad3b18b692838f895e6cb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 25.9MB
        • SHA256 a756e5df9493d61315a76dc8591cd87c319d822d14efd2080b90f7f65d78fa34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 12.9MB
        • SHA256 dd2d39268bf41f26e5f3279b27a76b0c4f8baf5ac8f33ba388571fd8f68493e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 25.9MB
        • SHA256 21d0b8dd3063a727e8e9a9602ad69ff8b07110b898bf9968647cde98cd9d4ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 25.9MB
        • SHA256 d5d3537c031173787d02d68cab399ea11499fa2ecc814629d774596ac8fca516
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 25.9MB
        • SHA256 f24ffd624d664863adf667f926b3daa15084fb80e6c43665d9e34cb0bc836c8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 25.9MB
        • SHA256 3b18d9027c678c4b3dee668ae3c4098d364e82b13165de39e938de2d0af02dca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 25.9MB
        • SHA256 be7bf8ff4d0c815018931a6c393c9c356b592caac449b3efde1db5ff73713811
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 25.9MB
        • SHA256 45bbd9e3a5ffaf74a831ebe7a0773a6e4edf6bc5765c6a0c5d326de525d586f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 25.9MB
        • SHA256 3691939cc11743e64888a54b8e112ffa3cafe4e08b39c9b0b040c60be38a8945
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 25.9MB
        • SHA256 041f2450f3371c9609a468467a95d5715dc56bf12c77059efd4b852cc5d8ae50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 25.9MB
        • SHA256 0cf22b962ff4e82aa09ef657a7cbdf602ff3bbf112527cd2db29f1ca5bd3d7e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 26.0MB
        • SHA256 b26cc532bad3888f39962f772608b98f6bc02f38ba2aea6ce18bf18c91a29f58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 25.9MB
        • SHA256 b9d99bebc340c57cddf4bac2b91d71cb8c1c072a3e25f45afdb75fae83abf921
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 25.9MB
        • SHA256 737e98cb606304d4fb27058a021e8f1a819f0474ec0af4108531e735262598ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 25.9MB
        • SHA256 6412a952533c88c8e5eb18cb4574292b8e426635b39f8820c37a585d2f11f0b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download