General
- Target 2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 15.8MB
- Sample260714-xae7vsdz5v
- SHA256 c5ab8dd5acdb35a4e65ef98dd23031dc48a399cdcead2e35ba08bec51d5c3de9
- MD5 ace11cd0944c99b15e9e6dbe63349ffd
- SHA1 9169536d99e8df77cfaf48e3c6c31a000801a293
- SHA512 6c32a822bf555c9b7b78b4ddc5b7249f4e21a90ef85092ba249344502191211ed7f0130bdae669f05feeaeb219beaf75d25877f409703278b4374d3b51cad817
- SSDEEP 196608:Qi8kL3Hxz7/h1+C6i8kL3Hxz7/h1+C8WqQI0py:IkL3R6kL3R4WqQjp
- TLSH T1E8F69F13F2E440E9E07AD174C6669632DA72BC465B30D6CF2258B7192F73BD09B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_ace11cd0944c99b15e9e6dbe63349ffd_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 15.8MB
- SHA256 c5ab8dd5acdb35a4e65ef98dd23031dc48a399cdcead2e35ba08bec51d5c3de9
- MD5 ace11cd0944c99b15e9e6dbe63349ffd
- SHA1 9169536d99e8df77cfaf48e3c6c31a000801a293
- SHA512 6c32a822bf555c9b7b78b4ddc5b7249f4e21a90ef85092ba249344502191211ed7f0130bdae669f05feeaeb219beaf75d25877f409703278b4374d3b51cad817
- SSDEEP 196608:Qi8kL3Hxz7/h1+C6i8kL3Hxz7/h1+C8WqQI0py:IkL3R6kL3R4WqQjp
- TLSH T1E8F69F13F2E440E9E07AD174C6669632DA72BC465B30D6CF2258B7192F73BD09B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry