General
- Target 2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.4MB
- Sample260707-qvctxaa13x
- SHA256 7f7c53367a8f5390223a4710f5be781586f2aec187dee977e4ff1c7fa7eb58aa
- MD5 0418790762e154757f82448ce1d9e251
- SHA1 65e2820067ee212f84a1ca33595cba6446fdfd47
- SHA512 cae5fe362941ccb21d87500392a68ff72de838e0863e572e7489e58deac3d55a5e82e2e462485112b60c4e1aaaa2ef518f7ef5808ddd842730547e63eedbe947
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLyu5x6M1WoDDklJ6qqUHxqPFeL3hx0zVGgHIKgM:Qi8kL3Hxzli8kL3HxzNKzhoK
- TLSH T17FD69E13B2D500E9D06EC130D7269632E6B2BC564B60D7CF6698B21A1F73BD06B3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_0418790762e154757f82448ce1d9e251_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.4MB
- SHA256 7f7c53367a8f5390223a4710f5be781586f2aec187dee977e4ff1c7fa7eb58aa
- MD5 0418790762e154757f82448ce1d9e251
- SHA1 65e2820067ee212f84a1ca33595cba6446fdfd47
- SHA512 cae5fe362941ccb21d87500392a68ff72de838e0863e572e7489e58deac3d55a5e82e2e462485112b60c4e1aaaa2ef518f7ef5808ddd842730547e63eedbe947
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLyu5x6M1WoDDklJ6qqUHxqPFeL3hx0zVGgHIKgM:Qi8kL3Hxzli8kL3HxzNKzhoK
- TLSH T17FD69E13B2D500E9D06EC130D7269632E6B2BC564B60D7CF6698B21A1F73BD06B3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry