General
- Target 2026-07-14_138e3a6689d0a1baa81a3f45be265d19_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 14.1MB
- Sample260714-x2ytaaex5s
- SHA256 11c80063304c712863d14bf7cf9ee601a5986784fef5e2d78ae5bab1e1490fa8
- MD5 138e3a6689d0a1baa81a3f45be265d19
- SHA1 3d5ec99e03db76a40797b40fbf375afccbc269a7
- SHA512 ae0faec778c83faddb88fa9cedc53a5ddb190ebd641db1c5b2776c86b76169f51fcf08513d4b17efc9dc77bcf59176f5856cfbc5e9c8b89a31bdfb0b8f47b53a
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxB:Qi8kL3HxzOGhi8kL3HxzOGRGn
- TLSH T1E5E68E06B6E441A9D06BC234C6669632F672BC461720DBDF2695F61E1F33BD05F3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_138e3a6689d0a1baa81a3f45be265d19_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_138e3a6689d0a1baa81a3f45be265d19_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_138e3a6689d0a1baa81a3f45be265d19_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 14.1MB
- SHA256 11c80063304c712863d14bf7cf9ee601a5986784fef5e2d78ae5bab1e1490fa8
- MD5 138e3a6689d0a1baa81a3f45be265d19
- SHA1 3d5ec99e03db76a40797b40fbf375afccbc269a7
- SHA512 ae0faec778c83faddb88fa9cedc53a5ddb190ebd641db1c5b2776c86b76169f51fcf08513d4b17efc9dc77bcf59176f5856cfbc5e9c8b89a31bdfb0b8f47b53a
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxB:Qi8kL3HxzOGhi8kL3HxzOGRGn
- TLSH T1E5E68E06B6E441A9D06BC234C6669632F672BC461720DBDF2695F61E1F33BD05F3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry