General
- Target 2026-07-30_ebda36446cf895244db4df31f96036df_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 15.0MB
- Sample260730-bfhpaaap9s
- SHA256 c48e52bf1bdb6cf4fa65ab31146162308ffe06a0d7e1f8ced584fc43474378c7
- MD5 ebda36446cf895244db4df31f96036df
- SHA1 eda429c7723f558ef6f045658d5d1a14405cc9a6
- SHA512 385fc865a760c50e201db92b3bd508a30e109d61c88bcb2d810952547095dfce0eb4baa3696a0c3991338692cff50a836beaaafcbbf4f0a9bb98943e65b51310
- SSDEEP 196608:Ji8kL3Hxw18U+i8kL3Hxw18UzWqQI0py:FkL3RoGkL3RovWqQjp
- TLSH T1D6F69F03F6E540E9E06EC134D7659632EA72BC525B30A6CF2294B61A1F73BD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_ebda36446cf895244db4df31f96036df_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_ebda36446cf895244db4df31f96036df_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ebda36446cf895244db4df31f96036df_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 15.0MB
- SHA256 c48e52bf1bdb6cf4fa65ab31146162308ffe06a0d7e1f8ced584fc43474378c7
- MD5 ebda36446cf895244db4df31f96036df
- SHA1 eda429c7723f558ef6f045658d5d1a14405cc9a6
- SHA512 385fc865a760c50e201db92b3bd508a30e109d61c88bcb2d810952547095dfce0eb4baa3696a0c3991338692cff50a836beaaafcbbf4f0a9bb98943e65b51310
- SSDEEP 196608:Ji8kL3Hxw18U+i8kL3Hxw18UzWqQI0py:FkL3RoGkL3RovWqQjp
- TLSH T1D6F69F03F6E540E9E06EC134D7659632EA72BC525B30A6CF2294B61A1F73BD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry