General
- Target 2026-07-22_2dda2dbf8583a5884cd5782de3336bbe_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 53.2MB
- Sample260722-wm7bfaem2y
- SHA256 d66616a227e8fdbda9199f401b520d4caa2bd28ad03c43b007bf2f41f926bdee
- MD5 2dda2dbf8583a5884cd5782de3336bbe
- SHA1 e78ecd5ed13372ca11626d7b4348af3494dbbfa0
- SHA512 19fc0f5d4bad6dac3525dff70531de1201cccdfdb035ed071ef51a1d4c741f0c3de0d0d8c8b81d9333a66ce9f28f60fc417e65000e69e29fe1b41bc7d7f7deef
- SSDEEP 393216:2cD2cD1jrOB+AcD2cD1jrOB+kWqQjpmcD2cD1jBcD2cO:tZZPOB+DZZPOB+Dfjp9ZZ2ZO
- TLSH T1C9C77B12B6958AE8D16FD4708A565672DA337C464F309BCF4290FE283E336E05E3572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_2dda2dbf8583a5884cd5782de3336bbe_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_2dda2dbf8583a5884cd5782de3336bbe_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_2dda2dbf8583a5884cd5782de3336bbe_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 53.2MB
- SHA256 d66616a227e8fdbda9199f401b520d4caa2bd28ad03c43b007bf2f41f926bdee
- MD5 2dda2dbf8583a5884cd5782de3336bbe
- SHA1 e78ecd5ed13372ca11626d7b4348af3494dbbfa0
- SHA512 19fc0f5d4bad6dac3525dff70531de1201cccdfdb035ed071ef51a1d4c741f0c3de0d0d8c8b81d9333a66ce9f28f60fc417e65000e69e29fe1b41bc7d7f7deef
- SSDEEP 393216:2cD2cD1jrOB+AcD2cD1jrOB+kWqQjpmcD2cD1jBcD2cO:tZZPOB+DZZPOB+Dfjp9ZZ2ZO
- TLSH T1C9C77B12B6958AE8D16FD4708A565672DA337C464F309BCF4290FE283E336E05E3572B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry