General
- Target 2026-07-28_af09190a0329adb975c42c7fd91da719_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 7.0MB
- Sample260728-18dngayzhs
- SHA256 9aece34d131361fca7fd4b3d3f62e24af6a1f7bf6920b688ce37d998b51c0712
- MD5 af09190a0329adb975c42c7fd91da719
- SHA1 b96f3df5bc838742601b72c566c751499ba05e76
- SHA512 96a0d7d667f11c8bf0a604cacab80e8d1347f30df28c2e42b1d2c8ca7fde10223402f06d20084f6d232f5b9c316d5036164b73f30fcd0141bd7b6e288e10db0a
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLZoq2Vjnm:Qi8kL3HxzNGn
- TLSH T1F9768E06F6E441A9D0AAC634D7668532F6727C464B30D6DF1299F62E1F33BD05A3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_af09190a0329adb975c42c7fd91da719_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_af09190a0329adb975c42c7fd91da719_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_af09190a0329adb975c42c7fd91da719_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 7.0MB
- SHA256 9aece34d131361fca7fd4b3d3f62e24af6a1f7bf6920b688ce37d998b51c0712
- MD5 af09190a0329adb975c42c7fd91da719
- SHA1 b96f3df5bc838742601b72c566c751499ba05e76
- SHA512 96a0d7d667f11c8bf0a604cacab80e8d1347f30df28c2e42b1d2c8ca7fde10223402f06d20084f6d232f5b9c316d5036164b73f30fcd0141bd7b6e288e10db0a
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLZoq2Vjnm:Qi8kL3HxzNGn
- TLSH T1F9768E06F6E441A9D0AAC634D7668532F6727C464B30D6DF1299F62E1F33BD05A3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry