General
- Target 2026-07-29_2759a8c02bbdd8e6a32180e739a314b3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.1MB
- Sample260729-zzkvrasfqf
- SHA256 1067086195f86759b3139db14b9e77b5c9412217e7d15d6ddeaade2179c5bca5
- MD5 2759a8c02bbdd8e6a32180e739a314b3
- SHA1 aab0320ca6bfe2fbaa9167d430e3466e0a66a273
- SHA512 3e8c6c87a135ba8d9a3852438e3f287dbb0f72b1869ab26452acd4b3c575670a2844bf7a3b265d12aabb6f6dd246a4a4ab76b50b47ec762e5bae3f0699f011bc
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTPoq2VjnmLu5x6M1WoDDky:Qi8kL3HxzOGgGnhi8kL3HxzOGgGnV
- TLSH T1E1078E06B6E841A9D0B7C274C6669637F6727C460B30DBDF1295B61E2F33BD05A3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_2759a8c02bbdd8e6a32180e739a314b3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_2759a8c02bbdd8e6a32180e739a314b3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_2759a8c02bbdd8e6a32180e739a314b3_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.1MB
- SHA256 1067086195f86759b3139db14b9e77b5c9412217e7d15d6ddeaade2179c5bca5
- MD5 2759a8c02bbdd8e6a32180e739a314b3
- SHA1 aab0320ca6bfe2fbaa9167d430e3466e0a66a273
- SHA512 3e8c6c87a135ba8d9a3852438e3f287dbb0f72b1869ab26452acd4b3c575670a2844bf7a3b265d12aabb6f6dd246a4a4ab76b50b47ec762e5bae3f0699f011bc
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTPoq2VjnmLu5x6M1WoDDky:Qi8kL3HxzOGgGnhi8kL3HxzOGgGnV
- TLSH T1E1078E06B6E841A9D0B7C274C6669637F6727C460B30DBDF1295B61E2F33BD05A3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry