General
- Target 2026-07-29_a9f341465f864f484c097b492d1be98f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 16.4MB
- Sample260729-vs3prscj7z
- SHA256 17136caf24be331e9dd7e62f0d353e1bf4332bd8927e142e5a5b7593ccee73c3
- MD5 a9f341465f864f484c097b492d1be98f
- SHA1 b505bcd7f0b01c6fce4c43fc3d6d987add52f5a9
- SHA512 63c00ba80cc848e9746e329ff8680d5ed8c185f42382a39eaed0717629040643a4f0333c8e9dfd20b92bd690e6b13d7cea4b7563d3de80189458a2644f43122c
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTPoq2VjnmLu5x6M1WoDDk5:Qi8kL3HxzOGgGnhi8kL3HxzOGgGnL
- TLSH T104078E06B6E841E9D1ABC27486668633E7727C061B30D7DF5295B61E1F33BD05E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a9f341465f864f484c097b492d1be98f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a9f341465f864f484c097b492d1be98f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a9f341465f864f484c097b492d1be98f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 16.4MB
- SHA256 17136caf24be331e9dd7e62f0d353e1bf4332bd8927e142e5a5b7593ccee73c3
- MD5 a9f341465f864f484c097b492d1be98f
- SHA1 b505bcd7f0b01c6fce4c43fc3d6d987add52f5a9
- SHA512 63c00ba80cc848e9746e329ff8680d5ed8c185f42382a39eaed0717629040643a4f0333c8e9dfd20b92bd690e6b13d7cea4b7563d3de80189458a2644f43122c
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTPoq2VjnmLu5x6M1WoDDk5:Qi8kL3HxzOGgGnhi8kL3HxzOGgGnL
- TLSH T104078E06B6E841E9D1ABC27486668633E7727C061B30D7DF5295B61E1F33BD05E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry