General
- Target 2026-07-04_6f2436031d92ed8ea7a636f18fb7e50c_akira_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar
- Size 2.6MB
- Sample260705-aq6nesbt3l
- SHA256 3fcdf988922c9d8d16b2fc63a6dffa81e880267674f6f81479954278e8aac6c0
- MD5 6f2436031d92ed8ea7a636f18fb7e50c
- SHA1 e6aecd5a89739f7f26604b04342566ab5c76ef43
- SHA512 ad859951b7a0f8a2195d256b09c0fcdbb575f5e9ad61b78c693a0272661bf61a112be00925918c0e1ba82fe79a09bf623965c03c648c4bb74c317af82b032037
- SSDEEP 49152:PbE2itY4be4yHQp0+6N/zdzQiHbTTOtjDvdpiryXkp8oL+bzxGMzvG:uVa/rytjpm
- TLSH T1F1C54A5E529D00E8D1AAD17C8A468A0AE271F806C732A7CF1664475B1F7B7E35FBE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-04_6f2436031d92ed8ea7a636f18fb7e50c_akira_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_6f2436031d92ed8ea7a636f18fb7e50c_akira_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_6f2436031d92ed8ea7a636f18fb7e50c_akira_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar
- Size 2.6MB
- SHA256 3fcdf988922c9d8d16b2fc63a6dffa81e880267674f6f81479954278e8aac6c0
- MD5 6f2436031d92ed8ea7a636f18fb7e50c
- SHA1 e6aecd5a89739f7f26604b04342566ab5c76ef43
- SHA512 ad859951b7a0f8a2195d256b09c0fcdbb575f5e9ad61b78c693a0272661bf61a112be00925918c0e1ba82fe79a09bf623965c03c648c4bb74c317af82b032037
- SSDEEP 49152:PbE2itY4be4yHQp0+6N/zdzQiHbTTOtjDvdpiryXkp8oL+bzxGMzvG:uVa/rytjpm
- TLSH T1F1C54A5E529D00E8D1AAD17C8A468A0AE271F806C732A7CF1664475B1F7B7E35FBE310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects ClaimLoader loader
-
Creates new service(s)
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1