General
- Target 2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.9MB
- Sample260714-txk5vabs2x
- SHA256 4e9896365415a06f4257737da6950f49b41caa4f286e0bbaa57f06c1871ab209
- MD5 b8a5d947a28f956c391214894122afd1
- SHA1 acf8c9568d0d3f14280d0d9c5651a680b52eead0
- SHA512 78767492fa38eb5ccf3721de78aff0b0d3d032578f8f7e6d142f86cf99333ff8573fa15c13394434a3a258fa59cd6014fdf044f7486ad13b25bb43099b655401
- SSDEEP 196608:Qi8kL3Hxz7/h1+C6i8kL3Hxz7/h1+C8WqQI0pyvb:IkL3R6kL3R4WqQjpK
- TLSH T1FAF69F13F2E440E9E07AD174C6669632DA72BC465B30D6CF2258B7192F73BD09B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b8a5d947a28f956c391214894122afd1_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.9MB
- SHA256 4e9896365415a06f4257737da6950f49b41caa4f286e0bbaa57f06c1871ab209
- MD5 b8a5d947a28f956c391214894122afd1
- SHA1 acf8c9568d0d3f14280d0d9c5651a680b52eead0
- SHA512 78767492fa38eb5ccf3721de78aff0b0d3d032578f8f7e6d142f86cf99333ff8573fa15c13394434a3a258fa59cd6014fdf044f7486ad13b25bb43099b655401
- SSDEEP 196608:Qi8kL3Hxz7/h1+C6i8kL3Hxz7/h1+C8WqQI0pyvb:IkL3R6kL3R4WqQjpK
- TLSH T1FAF69F13F2E440E9E07AD174C6669632DA72BC465B30D6CF2258B7192F73BD09B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry