General
- Target 2026-07-19_9cb09f6eadc079f438decd69801fcebc_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 5.7MB
- Sample260720-a9heyaax2p
- SHA256 4949100c11e594b559401424dc7f05d41e69f4e1278f4cc871b0a4dd1b671fca
- MD5 9cb09f6eadc079f438decd69801fcebc
- SHA1 00b4385d6237d594ec0c150354d5c6d2f493be1e
- SHA512 4069f0c16f125f221c6b9915cef659bebbe1a402393337184f7aba9228fdb58fcb6b0ac5a7c5ea2adb55b35d0c4a1f1fff4c6d4e8f3163bc8e336ae4243fcf66
- SSDEEP 49152:D8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpu1QG:BgTH2M2m9UMpu1QfLczqssnKSG
- TLSH T16E56B31125DA9FDCC05FA474CE0669E16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-19_9cb09f6eadc079f438decd69801fcebc_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_9cb09f6eadc079f438decd69801fcebc_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_9cb09f6eadc079f438decd69801fcebc_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 5.7MB
- SHA256 4949100c11e594b559401424dc7f05d41e69f4e1278f4cc871b0a4dd1b671fca
- MD5 9cb09f6eadc079f438decd69801fcebc
- SHA1 00b4385d6237d594ec0c150354d5c6d2f493be1e
- SHA512 4069f0c16f125f221c6b9915cef659bebbe1a402393337184f7aba9228fdb58fcb6b0ac5a7c5ea2adb55b35d0c4a1f1fff4c6d4e8f3163bc8e336ae4243fcf66
- SSDEEP 49152:D8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpu1QG:BgTH2M2m9UMpu1QfLczqssnKSG
- TLSH T16E56B31125DA9FDCC05FA474CE0669E16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application