General
- Target 2026-06-02_18138abb545f129ceec77b9f94df2a75_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 36.0MB
- Sample260602-tr58tsas5s
- SHA256 620e585755c0703dec1d17a909dc2893e8f2a49616bc907decb92c9288834875
- MD5 18138abb545f129ceec77b9f94df2a75
- SHA1 2aa4a60dac71e53904b2818e2729f7b85fb52c05
- SHA512 69a658feccf8615094f56897588f7b5ec7e12d15b60b52f427d3d3aa652ed3cf66c77277ba835e21bdac5c4066b8f0010fd6215c5fce3888b8e6f72f92e9db04
- SSDEEP 196608:Ji8kL3Hxpirli8kL3Hxpir1TUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:FkL3RIkL3RoUEtQevvqc2W1cpV2XI32i
- TLSH T154876B81B6E443E2E3AA953485B582B2EBB1BC0E1F31977F1179F21E1F376905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_18138abb545f129ceec77b9f94df2a75_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_18138abb545f129ceec77b9f94df2a75_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_18138abb545f129ceec77b9f94df2a75_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 36.0MB
- SHA256 620e585755c0703dec1d17a909dc2893e8f2a49616bc907decb92c9288834875
- MD5 18138abb545f129ceec77b9f94df2a75
- SHA1 2aa4a60dac71e53904b2818e2729f7b85fb52c05
- SHA512 69a658feccf8615094f56897588f7b5ec7e12d15b60b52f427d3d3aa652ed3cf66c77277ba835e21bdac5c4066b8f0010fd6215c5fce3888b8e6f72f92e9db04
- SSDEEP 196608:Ji8kL3Hxpirli8kL3Hxpir1TUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:FkL3RIkL3RoUEtQevvqc2W1cpV2XI32i
- TLSH T154876B81B6E443E2E3AA953485B582B2EBB1BC0E1F31977F1179F21E1F376905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry