General
- Target 2026-07-01_a2b3be9f0a9c3db70923f8fcf0e91121_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 15.7MB
- Sample260701-vazkdsaw2l
- SHA256 ccea6a86710d3bc6904cf20682075071c0cf45b3977c243b8545c631d84649a3
- MD5 a2b3be9f0a9c3db70923f8fcf0e91121
- SHA1 a9f161edb849ff4c518cbd6c2f51efcda8bfbc10
- SHA512 7378a274439ca36bce9ff0c075d8982ae358727b0ae7c9daeae48ccb0886aafdae1ce95340cadb8df74ee54b782fa260b541819e797ee68d13c52f00a85429de
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vQ:2cD2cDxjrOB+o
- TLSH T13EF64A12A6D48EE8D16FD4708A5666729A337C464F319BCF4680BE193E336E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_a2b3be9f0a9c3db70923f8fcf0e91121_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_a2b3be9f0a9c3db70923f8fcf0e91121_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_a2b3be9f0a9c3db70923f8fcf0e91121_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 ccea6a86710d3bc6904cf20682075071c0cf45b3977c243b8545c631d84649a3
- MD5 a2b3be9f0a9c3db70923f8fcf0e91121
- SHA1 a9f161edb849ff4c518cbd6c2f51efcda8bfbc10
- SHA512 7378a274439ca36bce9ff0c075d8982ae358727b0ae7c9daeae48ccb0886aafdae1ce95340cadb8df74ee54b782fa260b541819e797ee68d13c52f00a85429de
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vQ:2cD2cDxjrOB+o
- TLSH T13EF64A12A6D48EE8D16FD4708A5666729A337C464F319BCF4680BE193E336E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry