General
- Target 2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.5MB
- Sample260707-z2vsqsft2r
- SHA256 7c9af858a168eb99c05c6b9dcc217e488ecf80be78841418b898d4dea84355c4
- MD5 1829d5920471b1253a89c2cb62f35c36
- SHA1 8b313c1ce58a5ac94f3394905ab416ea740c8de9
- SHA512 75dcba306d1e5220e893d6c1f449a14dc53f61c1d22b58cb2d3b35480c20018ce7d2753d0827bf672c8d1eae7af16779686e99b7db6fcdd733ecea27dd7a0282
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLyu5x6M1WoDDklJ6qqUHxqPFeLRq9ceq9+2xl/SF:Qi8kL3Hxzli8kL3Hxz9WqQI0py+
- TLSH T117E6AF03F6E500E9E06AD234D7355632EA72BC465B30E6DF2298B6191F73BD05B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_1829d5920471b1253a89c2cb62f35c36_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 13.5MB
- SHA256 7c9af858a168eb99c05c6b9dcc217e488ecf80be78841418b898d4dea84355c4
- MD5 1829d5920471b1253a89c2cb62f35c36
- SHA1 8b313c1ce58a5ac94f3394905ab416ea740c8de9
- SHA512 75dcba306d1e5220e893d6c1f449a14dc53f61c1d22b58cb2d3b35480c20018ce7d2753d0827bf672c8d1eae7af16779686e99b7db6fcdd733ecea27dd7a0282
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLyu5x6M1WoDDklJ6qqUHxqPFeLRq9ceq9+2xl/SF:Qi8kL3Hxzli8kL3Hxz9WqQI0py+
- TLSH T117E6AF03F6E500E9E06AD234D7355632EA72BC465B30E6DF2298B6191F73BD05B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry