General
- Target 2026-07-30_60bb7485ac9846797a3bd193610a6249_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 54.2MB
- Sample260730-x5h71aed97
- SHA256 58b52c744f72f0d2061606703374e8a2d39e8f44dff33cef969b2076b3a7c4da
- MD5 60bb7485ac9846797a3bd193610a6249
- SHA1 b3edbe7cf359102d4ce0be07159bf62e202e111b
- SHA512 a5aefdf06fc9572d8a38a2eba119e075cd6d345efe5fdcbf673737ab21495f50e55b3511b3f046ae6cd68c0dfcd67c68146913c721c9efa0ec2636c9243bd57d
- SSDEEP 786432:IkL3RTNkL3RTDkL3RTNkL3RTTE8c23pV2X+w:JRT2RT0RT2RTTEh2ZV2XV
- TLSH T1E4C76B16B7E842E5E0A6D63886A68672FBB27C411B3097DF1255F61E1F33BD04E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_60bb7485ac9846797a3bd193610a6249_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_60bb7485ac9846797a3bd193610a6249_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_60bb7485ac9846797a3bd193610a6249_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 54.2MB
- SHA256 58b52c744f72f0d2061606703374e8a2d39e8f44dff33cef969b2076b3a7c4da
- MD5 60bb7485ac9846797a3bd193610a6249
- SHA1 b3edbe7cf359102d4ce0be07159bf62e202e111b
- SHA512 a5aefdf06fc9572d8a38a2eba119e075cd6d345efe5fdcbf673737ab21495f50e55b3511b3f046ae6cd68c0dfcd67c68146913c721c9efa0ec2636c9243bd57d
- SSDEEP 786432:IkL3RTNkL3RTDkL3RTNkL3RTTE8c23pV2X+w:JRT2RT0RT2RTTEh2ZV2XV
- TLSH T1E4C76B16B7E842E5E0A6D63886A68672FBB27C411B3097DF1255F61E1F33BD04E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry