General
- Target 2026-07-07_f26c94e765fa09ebe264f482d7500dd3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 50.1MB
- Sample260707-2bk7qae15x
- SHA256 afd524e8392677a6c11a304152eeb9fa704d847ff16cdf0cef33a743e288c717
- MD5 f26c94e765fa09ebe264f482d7500dd3
- SHA1 a8df53c660dd079f65a31213d574b57091c993e8
- SHA512 03eff359f23f92924db4f0bbac056be1ee81a39ecfe30bd9b199991c1947485a18a0ab71cf521b1ff982280f92078169e6a9a67901b94f42d88f52b4478f8c8b
- SSDEEP 393216:2cD2cD1jrOB+AcD2cD1jrOB+kWqQjpmcD2cD1jrOB+i:tZZPOB+DZZPOB+Dfjp9ZZPOB+i
- TLSH T159B75B12B6D58AE8D06FD470CA5666729A337C464F319BCB4680BE193E336E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_f26c94e765fa09ebe264f482d7500dd3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_f26c94e765fa09ebe264f482d7500dd3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_f26c94e765fa09ebe264f482d7500dd3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 50.1MB
- SHA256 afd524e8392677a6c11a304152eeb9fa704d847ff16cdf0cef33a743e288c717
- MD5 f26c94e765fa09ebe264f482d7500dd3
- SHA1 a8df53c660dd079f65a31213d574b57091c993e8
- SHA512 03eff359f23f92924db4f0bbac056be1ee81a39ecfe30bd9b199991c1947485a18a0ab71cf521b1ff982280f92078169e6a9a67901b94f42d88f52b4478f8c8b
- SSDEEP 393216:2cD2cD1jrOB+AcD2cD1jrOB+kWqQjpmcD2cD1jrOB+i:tZZPOB+DZZPOB+Dfjp9ZZPOB+i
- TLSH T159B75B12B6D58AE8D06FD470CA5666729A337C464F319BCB4680BE193E336E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry