General
- Target 2026-07-30_6425ddfb619cfa605202937ae7820e36_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 50.3MB
- Sample260730-bvdnwazwht
- SHA256 dc039273681db558ccaac11d0f9ceb62d30a0f8ccdb50ad4d55f9746c14801d7
- MD5 6425ddfb619cfa605202937ae7820e36
- SHA1 f3d9a5145e4ac587b005495b5aaa0f55dbd0c99e
- SHA512 b153d2e9dd9f7bc4832e2e73d1f13be4b4a5a948ea371a472ff9f668996bf8183c5575bb2f56a4808cfa9882f5103973954bdb9e49f609b9bec22593a064f392
- SSDEEP 786432:IkL3R5kL3RSkL3R5kL3RVkL3R5kL3RSkL3R5kL3RUfjz:JRqRDRqRuRqRDRqRUfjz
- TLSH T184C78E03F6E500A9D06AC274C7269632EA72BC461761D6DF26D4F66E1F33BD05B36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_6425ddfb619cfa605202937ae7820e36_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_6425ddfb619cfa605202937ae7820e36_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_6425ddfb619cfa605202937ae7820e36_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 50.3MB
- SHA256 dc039273681db558ccaac11d0f9ceb62d30a0f8ccdb50ad4d55f9746c14801d7
- MD5 6425ddfb619cfa605202937ae7820e36
- SHA1 f3d9a5145e4ac587b005495b5aaa0f55dbd0c99e
- SHA512 b153d2e9dd9f7bc4832e2e73d1f13be4b4a5a948ea371a472ff9f668996bf8183c5575bb2f56a4808cfa9882f5103973954bdb9e49f609b9bec22593a064f392
- SSDEEP 786432:IkL3R5kL3RSkL3R5kL3RVkL3R5kL3RSkL3R5kL3RUfjz:JRqRDRqRuRqRDRqRUfjz
- TLSH T184C78E03F6E500A9D06AC274C7269632EA72BC461761D6DF26D4F66E1F33BD05B36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry