General
- Target 2026-07-29_fddd1ca67395fb0b0f550b9fbad76a12_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 16.8MB
- Sample260729-xpjtlazgrc
- SHA256 624c512137a628849cce624103c74e3c1df7bdc492520b28000a2945dad90313
- MD5 fddd1ca67395fb0b0f550b9fbad76a12
- SHA1 8a0fe70e0d7c845af2d73765ed861567a7592d1b
- SHA512 66b7e80e784646e5e6565321e27d59f205eb98381e67b07c11ca809707c230743f8313c3aa02709697c88513430ba7822e46c70a02bf5158e328a41d8bfb1c35
- SSDEEP 196608:Qi8kL3HxzOGgGnhi8kL3HxzOGgGna/h1+:IkL3R0GNkL3R0G
- TLSH T15B078E06B6E841A9D0A7C274C6668637E7727C461B30DBDF1295B61E2F33BD05E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_fddd1ca67395fb0b0f550b9fbad76a12_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_fddd1ca67395fb0b0f550b9fbad76a12_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_fddd1ca67395fb0b0f550b9fbad76a12_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 16.8MB
- SHA256 624c512137a628849cce624103c74e3c1df7bdc492520b28000a2945dad90313
- MD5 fddd1ca67395fb0b0f550b9fbad76a12
- SHA1 8a0fe70e0d7c845af2d73765ed861567a7592d1b
- SHA512 66b7e80e784646e5e6565321e27d59f205eb98381e67b07c11ca809707c230743f8313c3aa02709697c88513430ba7822e46c70a02bf5158e328a41d8bfb1c35
- SSDEEP 196608:Qi8kL3HxzOGgGnhi8kL3HxzOGgGna/h1+:IkL3R0GNkL3R0G
- TLSH T15B078E06B6E841A9D0A7C274C6668637E7727C461B30DBDF1295B61E2F33BD05E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry