General
- Target 2026-07-12_c5ecd13db4e422fcf0d623216a3a3738_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.9MB
- Sample260712-nsgnzag13n
- SHA256 c2e196e6943b0104e824b90a1b705bb4ed312fbe67231776311323f2c9f8783b
- MD5 c5ecd13db4e422fcf0d623216a3a3738
- SHA1 ae70fb4b43ea55d83e321399eb0eb7d5be4f62b7
- SHA512 3a1dc962e904c7809274ece0adb39b844bfcdb83486a1a443943126548cabeba228fbe78f52b46d567b7aaff08c476e70b731ef35958b07574293344636a187e
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxX:Qi8kL3HxzOGhi8kL3HxzOG7
- TLSH T1AEC69F03B6E500EDD06BC234D6665632EA72BC461724DADF2698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_c5ecd13db4e422fcf0d623216a3a3738_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_c5ecd13db4e422fcf0d623216a3a3738_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_c5ecd13db4e422fcf0d623216a3a3738_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.9MB
- SHA256 c2e196e6943b0104e824b90a1b705bb4ed312fbe67231776311323f2c9f8783b
- MD5 c5ecd13db4e422fcf0d623216a3a3738
- SHA1 ae70fb4b43ea55d83e321399eb0eb7d5be4f62b7
- SHA512 3a1dc962e904c7809274ece0adb39b844bfcdb83486a1a443943126548cabeba228fbe78f52b46d567b7aaff08c476e70b731ef35958b07574293344636a187e
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxX:Qi8kL3HxzOGhi8kL3HxzOG7
- TLSH T1AEC69F03B6E500EDD06BC234D6665632EA72BC461724DADF2698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry