General
- Target 2026-07-07_adbebaebe60ebb261159af21119f36b2_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 40.9MB
- Sample260707-2rx68afv6y
- SHA256 06436dce40b61fb38e809ae731d4b0ae1d71ccbb817e2da1bb69d19f6ec3dd10
- MD5 adbebaebe60ebb261159af21119f36b2
- SHA1 b90e332f452b6dc57517f95c645c400d82dfe108
- SHA512 b1134b627863a7f7cc402c41b289114b232f28ad9724eea1546e8b9f7ff946698f0613b525075ffe1278aa6d70bf3b4f5d1549aa9a9153197e09798229a589d2
- SSDEEP 393216:2cD2cD1jrOB+AcD2cD1jrOB+kWqQjpmcD2c9:tZZPOB+DZZPOB+Dfjp9Z9
- TLSH T18E975B12B6958AE8D06FD4708A5666729A337C464F309BCF4680FE193E336E05E3572F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_adbebaebe60ebb261159af21119f36b2_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_adbebaebe60ebb261159af21119f36b2_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_adbebaebe60ebb261159af21119f36b2_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 40.9MB
- SHA256 06436dce40b61fb38e809ae731d4b0ae1d71ccbb817e2da1bb69d19f6ec3dd10
- MD5 adbebaebe60ebb261159af21119f36b2
- SHA1 b90e332f452b6dc57517f95c645c400d82dfe108
- SHA512 b1134b627863a7f7cc402c41b289114b232f28ad9724eea1546e8b9f7ff946698f0613b525075ffe1278aa6d70bf3b4f5d1549aa9a9153197e09798229a589d2
- SSDEEP 393216:2cD2cD1jrOB+AcD2cD1jrOB+kWqQjpmcD2c9:tZZPOB+DZZPOB+Dfjp9Z9
- TLSH T18E975B12B6958AE8D06FD4708A5666729A337C464F309BCF4680FE193E336E05E3572F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry