General
- Target 2026-07-02_59e5fdb9ac3ffc1840bdccc451e0f136_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 30.9MB
- Sample260702-jlfe4sd16s
- SHA256 3c030ffd6a97ea2eaed79f6239fb9a653a9986a837ca6b09f05fd995faffa790
- MD5 59e5fdb9ac3ffc1840bdccc451e0f136
- SHA1 118cf5de9ee3a4c55d50cad70269acd2c2e51ecb
- SHA512 0c1003435fbcd59544f526b794742a49f4b9493e29c6f9fa33b7bd43af5296d1031f6a385487e41be2c141d04b872f41f5df51365b7d7c71797538e92cd31677
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vc8Vb618U68Vbb8Vb618U68h:2cD2cDxjrOB+1cD2cDxjrOB+VD
- TLSH T1D3674A12A6D58EE8D16FD470CA5666729A337C464F309BCF4680BE193E326E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_59e5fdb9ac3ffc1840bdccc451e0f136_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_59e5fdb9ac3ffc1840bdccc451e0f136_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_59e5fdb9ac3ffc1840bdccc451e0f136_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 30.9MB
- SHA256 3c030ffd6a97ea2eaed79f6239fb9a653a9986a837ca6b09f05fd995faffa790
- MD5 59e5fdb9ac3ffc1840bdccc451e0f136
- SHA1 118cf5de9ee3a4c55d50cad70269acd2c2e51ecb
- SHA512 0c1003435fbcd59544f526b794742a49f4b9493e29c6f9fa33b7bd43af5296d1031f6a385487e41be2c141d04b872f41f5df51365b7d7c71797538e92cd31677
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vc8Vb618U68Vbb8Vb618U68h:2cD2cDxjrOB+1cD2cDxjrOB+VD
- TLSH T1D3674A12A6D58EE8D16FD470CA5666729A337C464F309BCF4680BE193E326E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application