General
- Target 2026-07-12_a60d677df5ab7d2f496808f01f80eb47_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.1MB
- Sample260712-n9bjaabt5s
- SHA256 5c38457f8f1db4a9b8a136040a1c983d7e8ac82dcaf70314825f4db22e00e48f
- MD5 a60d677df5ab7d2f496808f01f80eb47
- SHA1 e4bf39a6fc4eb5481e8ed2ee9efa6b104a3c51de
- SHA512 74d3564c3069f5dd9d69fd029107745ff2b970537c131dfc2eb82cb3280e5bd391e201525dba2be33723349c474bb465ba071cf3ee3a17a8b1615e3a40bd93fc
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C2eQ:Qi8kL3Hxz7/h1+CrQ
- TLSH T1D0568E12B6E441A9E077C634D5669536EA72BC420B30D6CF2299F61E1F33BD09B36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_a60d677df5ab7d2f496808f01f80eb47_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_a60d677df5ab7d2f496808f01f80eb47_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_a60d677df5ab7d2f496808f01f80eb47_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.1MB
- SHA256 5c38457f8f1db4a9b8a136040a1c983d7e8ac82dcaf70314825f4db22e00e48f
- MD5 a60d677df5ab7d2f496808f01f80eb47
- SHA1 e4bf39a6fc4eb5481e8ed2ee9efa6b104a3c51de
- SHA512 74d3564c3069f5dd9d69fd029107745ff2b970537c131dfc2eb82cb3280e5bd391e201525dba2be33723349c474bb465ba071cf3ee3a17a8b1615e3a40bd93fc
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C2eQ:Qi8kL3Hxz7/h1+CrQ
- TLSH T1D0568E12B6E441A9E077C634D5669536EA72BC420B30D6CF2299F61E1F33BD09B36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry