General
- Target 2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 41.2MB
- Sample260730-bdkqvszshx
- SHA256 1d3a5acb80f4423841af8f5349031bc7699e3b426916c4abae0c0a03a255853b
- MD5 f85d89cb0e9a3323fdd4189dfac439d3
- SHA1 d2064faf77d7f6b2f47f9a4641cbae519d3ad0b6
- SHA512 651a6de1330e7916777b1225d0ad710ff3844f2347e8300c4d0beaa50f61a4950684c75818af56729f0808b2e19cefa4f2ed9a2378682c452a1918994bf2e03a
- SSDEEP 786432:IkL3R5kL3RSkL3R5kL3RVkL3R5kL3RSkL3RW:JRqRDRqRuRqRDRW
- TLSH T13E978E03F6E500ADD06B8234D6255632EA72BC461761DADF26D8F66E1F33BD05B36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_f85d89cb0e9a3323fdd4189dfac439d3_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 41.2MB
- SHA256 1d3a5acb80f4423841af8f5349031bc7699e3b426916c4abae0c0a03a255853b
- MD5 f85d89cb0e9a3323fdd4189dfac439d3
- SHA1 d2064faf77d7f6b2f47f9a4641cbae519d3ad0b6
- SHA512 651a6de1330e7916777b1225d0ad710ff3844f2347e8300c4d0beaa50f61a4950684c75818af56729f0808b2e19cefa4f2ed9a2378682c452a1918994bf2e03a
- SSDEEP 786432:IkL3R5kL3RSkL3R5kL3RVkL3R5kL3RSkL3RW:JRqRDRqRuRqRDRW
- TLSH T13E978E03F6E500ADD06B8234D6255632EA72BC461761DADF26D8F66E1F33BD05B36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry