General
- Target 2026-06-03_80ab9613f2d9d70e9e4fee896b238861_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 16.3MB
- Sample260603-p8dspafv2v
- SHA256 e63e4a3de68151a60e46c1035e175b38202e248c61d90678c1f31316c62e789e
- MD5 80ab9613f2d9d70e9e4fee896b238861
- SHA1 c6e3c3ac695dc94ef52609bc75d045ba92d9546a
- SHA512 022f1d2ade4323444df7a97b6e40078310702d67e5dbe8c6f762000c04dd717e3b21673167ba0a83e5b111ea6f877476169472cb57a747fa3df9883c5c16dd2a
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0zgu5x6M1WoDDklJ6qqUHxqPFeLapIih/:Qi8kL3HxzcI+Kzzi8kL3HxzcI+KzTcW
- TLSH T1DA076C22B2E100A9D06A8131CF56963197E17C668FF0C7DFA149B2D91F727D07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_80ab9613f2d9d70e9e4fee896b238861_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_80ab9613f2d9d70e9e4fee896b238861_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_80ab9613f2d9d70e9e4fee896b238861_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 16.3MB
- SHA256 e63e4a3de68151a60e46c1035e175b38202e248c61d90678c1f31316c62e789e
- MD5 80ab9613f2d9d70e9e4fee896b238861
- SHA1 c6e3c3ac695dc94ef52609bc75d045ba92d9546a
- SHA512 022f1d2ade4323444df7a97b6e40078310702d67e5dbe8c6f762000c04dd717e3b21673167ba0a83e5b111ea6f877476169472cb57a747fa3df9883c5c16dd2a
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0zgu5x6M1WoDDklJ6qqUHxqPFeLapIih/:Qi8kL3HxzcI+Kzzi8kL3HxzcI+KzTcW
- TLSH T1DA076C22B2E100A9D06A8131CF56963197E17C668FF0C7DFA149B2D91F727D07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry