General
- Target 2026-06-26_4e0efa3f8eaef3fa36780236ef96db8a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 27.7MB
- Sample260629-tnftrsa13n
- SHA256 4c0f323f15a9714dc271e69d622e13a6a3f4f4c9b8e5840843cf2bd4d9318e0e
- MD5 4e0efa3f8eaef3fa36780236ef96db8a
- SHA1 57ac7add5fca84865051826c5e0acf7585d50423
- SHA512 e3a392be5ea49d9dedf8507c1f31a8c06a9cc04f1e7151faa03e6301f2809a7a65e435fc530fde6f0d05cab30c1b4290d57aee80aab0faffecc444507a43842b
- SSDEEP 196608:Ji8kL3Hxpiai8kL3HxpityvDi8kL3Hxpiai8kL3HxpityvFoK:FkL3RPkL3R8yvrkL3RPkL3R8yvFo
- TLSH T18B579F42B6D440F9E16E8530C5659632EAB2BC421B20D7CF6799F61A2F337D09E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_4e0efa3f8eaef3fa36780236ef96db8a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_4e0efa3f8eaef3fa36780236ef96db8a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_4e0efa3f8eaef3fa36780236ef96db8a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 27.7MB
- SHA256 4c0f323f15a9714dc271e69d622e13a6a3f4f4c9b8e5840843cf2bd4d9318e0e
- MD5 4e0efa3f8eaef3fa36780236ef96db8a
- SHA1 57ac7add5fca84865051826c5e0acf7585d50423
- SHA512 e3a392be5ea49d9dedf8507c1f31a8c06a9cc04f1e7151faa03e6301f2809a7a65e435fc530fde6f0d05cab30c1b4290d57aee80aab0faffecc444507a43842b
- SSDEEP 196608:Ji8kL3Hxpiai8kL3HxpityvDi8kL3Hxpiai8kL3HxpityvFoK:FkL3RPkL3R8yvrkL3RPkL3R8yvFo
- TLSH T18B579F42B6D440F9E16E8530C5659632EAB2BC421B20D7CF6799F61A2F337D09E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry