General
- Target 2026-07-18_8141492a85293b2097252b93480d5473_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.5MB
- Sample260718-m25aysct91
- SHA256 1d1245b5b75eac1b4576fa247ef5d4995c60c3c20acebf0e120580519798541f
- MD5 8141492a85293b2097252b93480d5473
- SHA1 fac9bced33b563036b1e54202f96f753ab888cf1
- SHA512 35f4b439dee73e20edce67d6c07da42903c31120f8dc72fa1679fc365bf26041e49e75af96a46d8b34b8c8d9a5064cc0f53328c51cb93f8313c3eb562feaaf60
- SSDEEP 196608:Qi8kL3Hxz7/h1+C6i8kL3Hxz7/h1+CM8i8kL3Hxz7/h1+C6i8kL3Hxz7/h1+CMFn:IkL3R6kL3R4kkL3R6kL3R4Flo+
- TLSH T16B478F13F6E441A9E07AD134C6669536EA72BC460720D6CF2699F71D2F33BD09B36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_8141492a85293b2097252b93480d5473_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_8141492a85293b2097252b93480d5473_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_8141492a85293b2097252b93480d5473_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.5MB
- SHA256 1d1245b5b75eac1b4576fa247ef5d4995c60c3c20acebf0e120580519798541f
- MD5 8141492a85293b2097252b93480d5473
- SHA1 fac9bced33b563036b1e54202f96f753ab888cf1
- SHA512 35f4b439dee73e20edce67d6c07da42903c31120f8dc72fa1679fc365bf26041e49e75af96a46d8b34b8c8d9a5064cc0f53328c51cb93f8313c3eb562feaaf60
- SSDEEP 196608:Qi8kL3Hxz7/h1+C6i8kL3Hxz7/h1+CM8i8kL3Hxz7/h1+C6i8kL3Hxz7/h1+CMFn:IkL3R6kL3R4kkL3R6kL3R4Flo+
- TLSH T16B478F13F6E441A9E07AD134C6669536EA72BC460720D6CF2699F71D2F33BD09B36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry