General
- Target 2026-07-29_cd97cc42ecc0f6d63bb3199aa344e186_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 16.9MB
- Sample260729-ftft3aeb84
- SHA256 367c11ad6214c6c6efcbaa9ebcfca80c6ba9169867c8f69712e61cdbe1a80a8b
- MD5 cd97cc42ecc0f6d63bb3199aa344e186
- SHA1 9f77ff1c7a30f4595b67b318f7c472f66dcfadfc
- SHA512 8bdfc1516290bf52ba095778da53f5a9573eb3318b59a34d6e3a541386ca204f53d70b13901eb7caf030cdc05f6a3b531555c31934f793ebd8349e589d669e87
- SSDEEP 196608:Qi8kL3HxzOGgGnhi8kL3HxzOGgGnE/h1+:IkL3R0GNkL3R0G
- TLSH T1F3078E06B6E841A9D0AAC274C6668637F6727C451B30DBDF1295F61E1F33BD05E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_cd97cc42ecc0f6d63bb3199aa344e186_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_cd97cc42ecc0f6d63bb3199aa344e186_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_cd97cc42ecc0f6d63bb3199aa344e186_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 16.9MB
- SHA256 367c11ad6214c6c6efcbaa9ebcfca80c6ba9169867c8f69712e61cdbe1a80a8b
- MD5 cd97cc42ecc0f6d63bb3199aa344e186
- SHA1 9f77ff1c7a30f4595b67b318f7c472f66dcfadfc
- SHA512 8bdfc1516290bf52ba095778da53f5a9573eb3318b59a34d6e3a541386ca204f53d70b13901eb7caf030cdc05f6a3b531555c31934f793ebd8349e589d669e87
- SSDEEP 196608:Qi8kL3HxzOGgGnhi8kL3HxzOGgGnE/h1+:IkL3R0GNkL3R0G
- TLSH T1F3078E06B6E841A9D0AAC274C6668637F6727C451B30DBDF1295F61E1F33BD05E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry