General
- Target 2026-05-03_689ed063d45a39d67e3da665607d181f_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- Sample260503-nrfehsbv7k
- SHA256 aff1f8c9b6a96d8bc2d6343a5ff80fdc9cf7c56a4177d1b7c6a52b40596f0d1b
- MD5 689ed063d45a39d67e3da665607d181f
- SHA1 3d03231936c32d87aba8d06e5f460ebaf12be06b
- SHA512 7621dd5dc88459fb3b9d68caf984f0e46754bf7c88bb16e15e9163924f75a35be15847c6f2d5dbe5b3d04129d76eefbcf683d72986c914db13b4b28ccba143a1
- SSDEEP 49152:MtpU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybp8:MtpUgTH2M2m9UMpu1QfLczqssnKSm
- TLSH T10156B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-03_689ed063d45a39d67e3da665607d181f_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_689ed063d45a39d67e3da665607d181f_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_689ed063d45a39d67e3da665607d181f_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- SHA256 aff1f8c9b6a96d8bc2d6343a5ff80fdc9cf7c56a4177d1b7c6a52b40596f0d1b
- MD5 689ed063d45a39d67e3da665607d181f
- SHA1 3d03231936c32d87aba8d06e5f460ebaf12be06b
- SHA512 7621dd5dc88459fb3b9d68caf984f0e46754bf7c88bb16e15e9163924f75a35be15847c6f2d5dbe5b3d04129d76eefbcf683d72986c914db13b4b28ccba143a1
- SSDEEP 49152:MtpU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybp8:MtpUgTH2M2m9UMpu1QfLczqssnKSm
- TLSH T10156B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables packed with ASPack
Executes dropped EXE
Adds Run key to start application