General
- Target 2026-07-15_7878c90824b2bbca806bb7da4e34123a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.7MB
- Sample260715-c4g84acy9v
- SHA256 af212e632caf497560cf676798b611e9d380dfe4de5e8dc4cb5590e53e1fa343
- MD5 7878c90824b2bbca806bb7da4e34123a
- SHA1 a8994311f9e25a2fc40b631a13fc94b321a734e5
- SHA512 b681e97ea298721841335f3de45352c50991a9a2cddc9acea4723825f71b909db6dee9ce43de17072b11e0fc04f35a694a850ee7316c40e6171963b352b19a0d
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C2eQzGgHIKgMyq9ceq9+2xl/SSay+:Qi8kL3Hxz7/h1+CrQboKYWqQI0py+
- TLSH T1B3C69E03F2E941E8E06AD274D7669632EA72BC465B30A6CF1244B7191F73BD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_7878c90824b2bbca806bb7da4e34123a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_7878c90824b2bbca806bb7da4e34123a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_7878c90824b2bbca806bb7da4e34123a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.7MB
- SHA256 af212e632caf497560cf676798b611e9d380dfe4de5e8dc4cb5590e53e1fa343
- MD5 7878c90824b2bbca806bb7da4e34123a
- SHA1 a8994311f9e25a2fc40b631a13fc94b321a734e5
- SHA512 b681e97ea298721841335f3de45352c50991a9a2cddc9acea4723825f71b909db6dee9ce43de17072b11e0fc04f35a694a850ee7316c40e6171963b352b19a0d
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C2eQzGgHIKgMyq9ceq9+2xl/SSay+:Qi8kL3Hxz7/h1+CrQboKYWqQI0py+
- TLSH T1B3C69E03F2E941E8E06AD274D7669632EA72BC465B30A6CF1244B7191F73BD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry