General
- Target 2026-07-07_ae20058e96f8325daebe8d2e0069a430_akira_amadey_cloudeye_cobalt-strike_elex_emotet_icedid_manuscrypt_njrat_nymaim_ramnit_rhadamanthys_smoke-loader_stop_vidar
- Size 10.0MB
- Sample260707-wejkeaa17v
- SHA256 34a1e6131b5fe3efeaf543f0f4fb692ca9af3b77109ccd64a8ce1b703f752fd4
- MD5 ae20058e96f8325daebe8d2e0069a430
- SHA1 102ca0194844641c095b969cdf71ac87949496fa
- SHA512 cf2863ff1f86d49578e2c033279817f90aa1c3b89e169cca5a47ec54a6c60160d7f26f9a31334699537a6c42883eefb5ce8238c3be17df6907f2173e29469dce
- SSDEEP 98304:7O4mO4VOO77GBfWgQgIDQv58u2V1NhS9Yw8yM2E5T3jp:pIYcGBfWgzuQv8wfeTTp
- TLSH T10CB62803E2A500A6F06E6170CB255610B6637D615BF2D2FB9AC1F13D6F72AC24AF5327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_ae20058e96f8325daebe8d2e0069a430_akira_amadey_cloudeye_cobalt-strike_elex_emotet_icedid_m.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_ae20058e96f8325daebe8d2e0069a430_akira_amadey_cloudeye_cobalt-strike_elex_emotet_icedid_m.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ae20058e96f8325daebe8d2e0069a430_akira_amadey_cloudeye_cobalt-strike_elex_emotet_icedid_manuscrypt_njrat_nymaim_ramnit_rhadamanthys_smoke-loader_stop_vidar
- Size 10.0MB
- SHA256 34a1e6131b5fe3efeaf543f0f4fb692ca9af3b77109ccd64a8ce1b703f752fd4
- MD5 ae20058e96f8325daebe8d2e0069a430
- SHA1 102ca0194844641c095b969cdf71ac87949496fa
- SHA512 cf2863ff1f86d49578e2c033279817f90aa1c3b89e169cca5a47ec54a6c60160d7f26f9a31334699537a6c42883eefb5ce8238c3be17df6907f2173e29469dce
- SSDEEP 98304:7O4mO4VOO77GBfWgQgIDQv58u2V1NhS9Yw8yM2E5T3jp:pIYcGBfWgzuQv8wfeTTp
- TLSH T10CB62803E2A500A6F06E6170CB255610B6637D615BF2D2FB9AC1F13D6F72AC24AF5327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext