General
- Target 2026-07-06_5cd49ce4edd9329e270dc522bf9b3aae_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 52.2MB
- Sample260707-d4xjfsd19j
- SHA256 1f39aac79a036097f673090b9dc9eb8ce4a37e885f3790e8c11c5bfa0f186eed
- MD5 5cd49ce4edd9329e270dc522bf9b3aae
- SHA1 c877de29d1d3eea0b53b512a36fb83b819de7454
- SHA512 2d21c3ff041b8212ef7a432b38632189a49a80a00746e5c14cefef0fed603d180f2b461a8b13dfa31122a080729e33c0bf3d679e6b5d0643304197b423d0014f
- SSDEEP 786432:FkL3RPkL3RVrkL3RPkL3RVOkL3RPkL3RVrkL3RPkL3RVx:+RIRiRIRRRIRiRIRH
- TLSH T14BC79E42B6D440B9E1BE8530D5659632EAB2BC421720D7CF6799F61A2F337C09E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_5cd49ce4edd9329e270dc522bf9b3aae_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_5cd49ce4edd9329e270dc522bf9b3aae_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5cd49ce4edd9329e270dc522bf9b3aae_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 52.2MB
- SHA256 1f39aac79a036097f673090b9dc9eb8ce4a37e885f3790e8c11c5bfa0f186eed
- MD5 5cd49ce4edd9329e270dc522bf9b3aae
- SHA1 c877de29d1d3eea0b53b512a36fb83b819de7454
- SHA512 2d21c3ff041b8212ef7a432b38632189a49a80a00746e5c14cefef0fed603d180f2b461a8b13dfa31122a080729e33c0bf3d679e6b5d0643304197b423d0014f
- SSDEEP 786432:FkL3RPkL3RVrkL3RPkL3RVOkL3RPkL3RVrkL3RPkL3RVx:+RIRiRIRRRIRiRIRH
- TLSH T14BC79E42B6D440B9E1BE8530D5659632EAB2BC421720D7CF6799F61A2F337C09E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry