General
- Target 2026-04-25_5d7efe2d7dd8ad5de0ee1830ef8f4a17_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 5.7MB
- Sample260425-c7trashs8n
- SHA256 aee99fa795e57902d9e3844e7a74da6f260d54f3d88b94889107a2342e09b782
- MD5 5d7efe2d7dd8ad5de0ee1830ef8f4a17
- SHA1 16b3759306980973a4fa26d0f8c7fd3ea385d52e
- SHA512 7d096b850c8ad6ff1bbdf7ab3cf64b532d30f3aa3a7dc9f5d2b9f75b757f45ca16ac6d0133cb4ff1efa354aab6605e7608cbd17c27500b8146892cfb8140f746
- SSDEEP 49152:OnPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPG:CKUgTH2M2m9UMpu1QfLczqssnKS7
- TLSH T12A56B31165DA9FDCC05FA474CE0669A16A237C868F61AFDF0980BE253E756B06F3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_5d7efe2d7dd8ad5de0ee1830ef8f4a17_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_5d7efe2d7dd8ad5de0ee1830ef8f4a17_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_5d7efe2d7dd8ad5de0ee1830ef8f4a17_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 5.7MB
- SHA256 aee99fa795e57902d9e3844e7a74da6f260d54f3d88b94889107a2342e09b782
- MD5 5d7efe2d7dd8ad5de0ee1830ef8f4a17
- SHA1 16b3759306980973a4fa26d0f8c7fd3ea385d52e
- SHA512 7d096b850c8ad6ff1bbdf7ab3cf64b532d30f3aa3a7dc9f5d2b9f75b757f45ca16ac6d0133cb4ff1efa354aab6605e7608cbd17c27500b8146892cfb8140f746
- SSDEEP 49152:OnPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPG:CKUgTH2M2m9UMpu1QfLczqssnKS7
- TLSH T12A56B31165DA9FDCC05FA474CE0669A16A237C868F61AFDF0980BE253E756B06F3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory