General
- Target 2026-06-04_2b50ac3956e5422ed6e10d17db93a13d_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- Sample260604-ctzemagy81
- SHA256 fdc0d0a82daf5ebbdfdb075e3c08031ed5a4d729220c4180cd616703a15d5597
- MD5 2b50ac3956e5422ed6e10d17db93a13d
- SHA1 9cc3adc63470230d27e55f8996620403f436d219
- SHA512 1871d1be4fead2a60f5854a59a4b6afa72ff5123367618c5aac4de61e2074764d11df16ca70b0fd606ea8fa531311058ed3ad5f946e47740f0c7c40b5f61d05b
- SSDEEP 49152:MtpU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpO:MtpUgTH2M2m9UMpu1QfLczqssnKSM
- TLSH T12456B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-04_2b50ac3956e5422ed6e10d17db93a13d_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_2b50ac3956e5422ed6e10d17db93a13d_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_2b50ac3956e5422ed6e10d17db93a13d_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- SHA256 fdc0d0a82daf5ebbdfdb075e3c08031ed5a4d729220c4180cd616703a15d5597
- MD5 2b50ac3956e5422ed6e10d17db93a13d
- SHA1 9cc3adc63470230d27e55f8996620403f436d219
- SHA512 1871d1be4fead2a60f5854a59a4b6afa72ff5123367618c5aac4de61e2074764d11df16ca70b0fd606ea8fa531311058ed3ad5f946e47740f0c7c40b5f61d05b
- SSDEEP 49152:MtpU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpO:MtpUgTH2M2m9UMpu1QfLczqssnKSM
- TLSH T12456B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables packed with ASPack
Executes dropped EXE
Adds Run key to start application