General
- Target 2026-05-25_50028c4768cc49dd0e477e6628b7cb25_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 7.6MB
- Sample260525-rykvcset9y
- SHA256 299bd5ecc761b19acf35eb1397451c0cc9f56f17cb07310ca1966e8651d176a3
- MD5 50028c4768cc49dd0e477e6628b7cb25
- SHA1 5060f4ec54363b1efdfd59a85fa1dc95b2f6d460
- SHA512 1477ea4bfb9548783cf9682efbf1d3c61b195a1d236478cdec1d8de2022516043de9097c7cb0efee1727fe1b845b18b0c853e9d42bb87aa6d4e13ad4dd8c0547
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0zn:Qi8kL3HxzcI+Kzn
- TLSH T1D2865C22B2E10099D05D8131DF168631A7E27C658FF1D3DFA199B2DA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-25_50028c4768cc49dd0e477e6628b7cb25_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_50028c4768cc49dd0e477e6628b7cb25_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_50028c4768cc49dd0e477e6628b7cb25_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 7.6MB
- SHA256 299bd5ecc761b19acf35eb1397451c0cc9f56f17cb07310ca1966e8651d176a3
- MD5 50028c4768cc49dd0e477e6628b7cb25
- SHA1 5060f4ec54363b1efdfd59a85fa1dc95b2f6d460
- SHA512 1477ea4bfb9548783cf9682efbf1d3c61b195a1d236478cdec1d8de2022516043de9097c7cb0efee1727fe1b845b18b0c853e9d42bb87aa6d4e13ad4dd8c0547
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0zn:Qi8kL3HxzcI+Kzn
- TLSH T1D2865C22B2E10099D05D8131DF168631A7E27C658FF1D3DFA199B2DA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry