General
- Target 2026-07-14_e3a97e76be76ed17b9f7f9562803daeb_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.2MB
- Sample260714-tnamraf19k
- SHA256 d0c6d4937f08dbf3b07f32ade535d7ebe69c73a4c5175d10e3951bda9960ced9
- MD5 e3a97e76be76ed17b9f7f9562803daeb
- SHA1 10dac6cb453ea786b9c2ced1c739773f125de362
- SHA512 49ebed71f4ba9f8ab8f2036297b52e853fdd69d7830584386bd2c0e2ba19811e009485e7d202f5a5534d7d96f838029b2b6331937f726cae145e96cd52a74f18
- SSDEEP 196608:Qi8kL3Hxz7/h1+CrQxi8kL3Hxz7/h1+CrQk:IkL3RlmkL3RlB
- TLSH T1A2D68E12B6E441A9E077C634D5669536EA72BC420B30D6CF2299F61E1F33BD09B36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_e3a97e76be76ed17b9f7f9562803daeb_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_e3a97e76be76ed17b9f7f9562803daeb_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e3a97e76be76ed17b9f7f9562803daeb_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.2MB
- SHA256 d0c6d4937f08dbf3b07f32ade535d7ebe69c73a4c5175d10e3951bda9960ced9
- MD5 e3a97e76be76ed17b9f7f9562803daeb
- SHA1 10dac6cb453ea786b9c2ced1c739773f125de362
- SHA512 49ebed71f4ba9f8ab8f2036297b52e853fdd69d7830584386bd2c0e2ba19811e009485e7d202f5a5534d7d96f838029b2b6331937f726cae145e96cd52a74f18
- SSDEEP 196608:Qi8kL3Hxz7/h1+CrQxi8kL3Hxz7/h1+CrQk:IkL3RlmkL3RlB
- TLSH T1A2D68E12B6E441A9E077C634D5669536EA72BC420B30D6CF2299F61E1F33BD09B36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry