General
- Target 2026-07-11_555cb2d0761c1c9810b127c8dd012962_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 6.2MB
- Sample260711-txzcgagy2w
- SHA256 86a0cb177a3ffd4b342e16cc08386ddd80acec0a0e504222e3406ce3fe63216b
- MD5 555cb2d0761c1c9810b127c8dd012962
- SHA1 c47004a4a5d94e492f98f3cc8e11967cef55b89e
- SHA512 418d7dd8a5a8a58907c04399c206ffbbe02a8722e381914fc3b59d2ca86e1921df043dc6facd956d62e3cc2f17ca4e103bbe878b914b481776efa23a9b158935
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+f3K:Qi8kL3Hxz7/h1+f3K
- TLSH T147668E02B6D441B9E076C534C565953AEA727C424B32DECF2289BA5E3F73BC09A35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_555cb2d0761c1c9810b127c8dd012962_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_555cb2d0761c1c9810b127c8dd012962_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_555cb2d0761c1c9810b127c8dd012962_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 6.2MB
- SHA256 86a0cb177a3ffd4b342e16cc08386ddd80acec0a0e504222e3406ce3fe63216b
- MD5 555cb2d0761c1c9810b127c8dd012962
- SHA1 c47004a4a5d94e492f98f3cc8e11967cef55b89e
- SHA512 418d7dd8a5a8a58907c04399c206ffbbe02a8722e381914fc3b59d2ca86e1921df043dc6facd956d62e3cc2f17ca4e103bbe878b914b481776efa23a9b158935
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+f3K:Qi8kL3Hxz7/h1+f3K
- TLSH T147668E02B6D441B9E076C534C565953AEA727C424B32DECF2289BA5E3F73BC09A35732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry