General
- Target 2026-07-11_41d2179c212c43f4be1c1d3be6194604_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 5.9MB
- Sample260711-t5xtlsg13w
- SHA256 fc50e90f4b43647a3699ea4d761e9de22b71001cf2ad2ccd9cd329737aac5e1f
- MD5 41d2179c212c43f4be1c1d3be6194604
- SHA1 dc76f96be9b3c249e342f102e1c1c93e84541620
- SHA512 609e1d97177a40e13ad220bbee3bae9b165fbf6683b0aba654c2c98add83790c014e72ee18cdedceef244d8768c65f12690c234d796b473b6b06bbb589e997ae
- SSDEEP 49152:gYRw5x6M1WoMCxfRqnqYQVMkL+qKlOVDTtQY6SoNtaUJ6fUnHpclbwbWAaJiwmqo:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C
- TLSH T181569F13F6E441A9E07AD134C6669536EA72BC460720D6CF3699F6192F33BD0DB36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_41d2179c212c43f4be1c1d3be6194604_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_41d2179c212c43f4be1c1d3be6194604_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_41d2179c212c43f4be1c1d3be6194604_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 5.9MB
- SHA256 fc50e90f4b43647a3699ea4d761e9de22b71001cf2ad2ccd9cd329737aac5e1f
- MD5 41d2179c212c43f4be1c1d3be6194604
- SHA1 dc76f96be9b3c249e342f102e1c1c93e84541620
- SHA512 609e1d97177a40e13ad220bbee3bae9b165fbf6683b0aba654c2c98add83790c014e72ee18cdedceef244d8768c65f12690c234d796b473b6b06bbb589e997ae
- SSDEEP 49152:gYRw5x6M1WoMCxfRqnqYQVMkL+qKlOVDTtQY6SoNtaUJ6fUnHpclbwbWAaJiwmqo:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C
- TLSH T181569F13F6E441A9E07AD134C6669536EA72BC460720D6CF3699F6192F33BD0DB36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry