General
- Target 2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.9MB
- Sample260728-e2sm6aeh92
- SHA256 d9c80c7d00572343fac42cdc318de66cfea6cea9161bdc6f8860fab96a8e9893
- MD5 d5e075c38c04bcef6d19ce5a1226a571
- SHA1 b02b85bb2a4f2163a8b164a02019b5ce52386858
- SHA512 7dbfd0b863152a8e59b98de7614f4e058da0f4e3f1b4f159a82e3fa0353723dcacf38440bcfb2bd837f6c0d13edbfc09f522e0aaf06b8c3c5a296025038f5767
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTGezSC6v2XMH:Qi8kL3HxzOG8
- TLSH T1FF769E03F6F441AAD07BC174C6669636EA727C461720DACF1299F61D2F33BD09A36326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_d5e075c38c04bcef6d19ce5a1226a571_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.9MB
- SHA256 d9c80c7d00572343fac42cdc318de66cfea6cea9161bdc6f8860fab96a8e9893
- MD5 d5e075c38c04bcef6d19ce5a1226a571
- SHA1 b02b85bb2a4f2163a8b164a02019b5ce52386858
- SHA512 7dbfd0b863152a8e59b98de7614f4e058da0f4e3f1b4f159a82e3fa0353723dcacf38440bcfb2bd837f6c0d13edbfc09f522e0aaf06b8c3c5a296025038f5767
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTGezSC6v2XMH:Qi8kL3HxzOG8
- TLSH T1FF769E03F6F441AAD07BC174C6669636EA727C461720DACF1299F61D2F33BD09A36326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry