General
- Target 2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.4MB
- Sample260602-ra6rxse121
- SHA256 8a77126519489e35c350587f1df6d3ced820d773c9cf346b5d8f04b88cae4b77
- MD5 40f1e2578f4e3e06663635240f6cc377
- SHA1 0948c45785fcc2a528248065d6151dd183d3b628
- SHA512 33771b6955e68a38a49ef5192dc9ad5cbe4bb8237aea1ce8705561c86c931fa9539b63cb1576eb44c3f09c465854501e4f96e72204a28be7341c06081d255a41
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxQu5x6M1WoDDklJ6qqUHxehx0z:Ji8kL3HxDi8kL3HxKKz
- TLSH T155969F5376E100ADE06E85309B669632DAF2BC925F60D7CF4681F61A1F72BC0AB35317
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.4MB
- SHA256 8a77126519489e35c350587f1df6d3ced820d773c9cf346b5d8f04b88cae4b77
- MD5 40f1e2578f4e3e06663635240f6cc377
- SHA1 0948c45785fcc2a528248065d6151dd183d3b628
- SHA512 33771b6955e68a38a49ef5192dc9ad5cbe4bb8237aea1ce8705561c86c931fa9539b63cb1576eb44c3f09c465854501e4f96e72204a28be7341c06081d255a41
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxQu5x6M1WoDDklJ6qqUHxehx0z:Ji8kL3HxDi8kL3HxKKz
- TLSH T155969F5376E100ADE06E85309B669632DAF2BC925F60D7CF4681F61A1F72BC0AB35317
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry