General
- Target 2026-05-22_e5f028e1bd79786102ef2ea67e8062fa_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 12.0MB
- Sample260522-vctrxsc12z
- SHA256 2722a2d8f8086cc72b993cf8eef38834a1480c5e2dfc7dc3ccd09d2599c55fc9
- MD5 e5f028e1bd79786102ef2ea67e8062fa
- SHA1 f6136d13d1d1fc3f375d15605b2cdf92dd2f0a39
- SHA512 e52ebea6eab481a6423ec86bdf249cc1b0261fa39e405f37454821f32a3abf98c2d9ce2a0c0b8990a9edb77e174f80eb7beec292dfb3a4059d50ea5b46db6816
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7KLapIAu5x6M1WoDDklJ6qqUHxqPF7KLapIh:Ji8kL3Hx/cITi8kL3Hx/cIh
- TLSH T156C66C1372E100A9D1AA8130DF15863197E2BC694BF1D7DF7159B2CA2F72BC07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_e5f028e1bd79786102ef2ea67e8062fa_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_e5f028e1bd79786102ef2ea67e8062fa_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_e5f028e1bd79786102ef2ea67e8062fa_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 12.0MB
- SHA256 2722a2d8f8086cc72b993cf8eef38834a1480c5e2dfc7dc3ccd09d2599c55fc9
- MD5 e5f028e1bd79786102ef2ea67e8062fa
- SHA1 f6136d13d1d1fc3f375d15605b2cdf92dd2f0a39
- SHA512 e52ebea6eab481a6423ec86bdf249cc1b0261fa39e405f37454821f32a3abf98c2d9ce2a0c0b8990a9edb77e174f80eb7beec292dfb3a4059d50ea5b46db6816
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7KLapIAu5x6M1WoDDklJ6qqUHxqPF7KLapIh:Ji8kL3Hx/cITi8kL3Hx/cIh
- TLSH T156C66C1372E100A9D1AA8130DF15863197E2BC694BF1D7DF7159B2CA2F72BC07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry