General
- Target 2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 11.9MB
- Sample260712-m7psfsav3y
- SHA256 c4deab6f66d544665448552841e90aeff2c90fe921e64bbc7327a91be655dfa7
- MD5 e7b06350d175e7c5e0690432bf66a820
- SHA1 2418661dce002b9fe235bcd14deaa5576b5ee248
- SHA512 5e18e007b6547a1b35623548feb388ed2e12d2a1189503ae98746df585af1e58203067c7552f63aa89830419c2b102e78fe52c1008848a07c3fda37006c69623
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxv:Qi8kL3HxzOGhi8kL3HxzOG/j
- TLSH T1A1C69F03B6E500EDD06BC234D6265632EA72BC461725DADF2698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_e7b06350d175e7c5e0690432bf66a820_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 11.9MB
- SHA256 c4deab6f66d544665448552841e90aeff2c90fe921e64bbc7327a91be655dfa7
- MD5 e7b06350d175e7c5e0690432bf66a820
- SHA1 2418661dce002b9fe235bcd14deaa5576b5ee248
- SHA512 5e18e007b6547a1b35623548feb388ed2e12d2a1189503ae98746df585af1e58203067c7552f63aa89830419c2b102e78fe52c1008848a07c3fda37006c69623
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxv:Qi8kL3HxzOGhi8kL3HxzOG/j
- TLSH T1A1C69F03B6E500EDD06BC234D6265632EA72BC461725DADF2698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry