General
- Target 2026-07-30_1cd180f9ca84b9b4b164b7d32ca3f4d7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 15.6MB
- Sample260730-gmrhnadn6s
- SHA256 e84806e68a4968bd0152d1fba230e50a695e888cdc0b498b64e3bd526ce6c165
- MD5 1cd180f9ca84b9b4b164b7d32ca3f4d7
- SHA1 57edb6fa870a4c60831ed2d52b9c70a711eda31e
- SHA512 8ee88cad2695abf39e8c7e7ab95c024c17bb4ebc127decb00d2d3c67af3a8acb6ff2ba0c6982a4f026ee3f4c49ce1f25073241a168fd02dc95fa9f3d19cf4865
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF75u5x6M1WoD6u5x6M1WoD7u5x6M1WoDDklJ6qqUHb:Ji8kL3Hxpiai/i8kL3HxpiaiWi/h1+
- TLSH T132F69F42B6D440BAE17E853081659636E7B2BC421721DBCF6799F61A2F337C09E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_1cd180f9ca84b9b4b164b7d32ca3f4d7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_1cd180f9ca84b9b4b164b7d32ca3f4d7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_1cd180f9ca84b9b4b164b7d32ca3f4d7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 15.6MB
- SHA256 e84806e68a4968bd0152d1fba230e50a695e888cdc0b498b64e3bd526ce6c165
- MD5 1cd180f9ca84b9b4b164b7d32ca3f4d7
- SHA1 57edb6fa870a4c60831ed2d52b9c70a711eda31e
- SHA512 8ee88cad2695abf39e8c7e7ab95c024c17bb4ebc127decb00d2d3c67af3a8acb6ff2ba0c6982a4f026ee3f4c49ce1f25073241a168fd02dc95fa9f3d19cf4865
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF75u5x6M1WoD6u5x6M1WoD7u5x6M1WoDDklJ6qqUHb:Ji8kL3Hxpiai/i8kL3HxpiaiWi/h1+
- TLSH T132F69F42B6D440BAE17E853081659636E7B2BC421721DBCF6799F61A2F337C09E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry