General
- Target 2026-07-31_74f984eca62cb1ce1b6b2766880800ad_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.1MB
- Sample260731-wgnbdaxfld
- SHA256 3781f2bf7e4c1b67883f28863899e203499380b06719a87fd12a36e9e690d907
- MD5 74f984eca62cb1ce1b6b2766880800ad
- SHA1 334e3baa939ca917273b82dbc6333899afc69d8c
- SHA512 8a125b6b2fb7fc20d69ca7d13c903a04e22a53e69d3afe9d605086da4a685f4545e7a345de0af8eb079041fdb3eb7b9f3c4555af968c7bc976096c6e40857584
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0zJ/h1+:Qi8kL3HxzcI+KzJ/h1+
- TLSH T1B1866C22B2E100A9D06A8131CF56863197F27C668FF1C7DFA149B2D91F727D07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_74f984eca62cb1ce1b6b2766880800ad_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_74f984eca62cb1ce1b6b2766880800ad_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_74f984eca62cb1ce1b6b2766880800ad_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.1MB
- SHA256 3781f2bf7e4c1b67883f28863899e203499380b06719a87fd12a36e9e690d907
- MD5 74f984eca62cb1ce1b6b2766880800ad
- SHA1 334e3baa939ca917273b82dbc6333899afc69d8c
- SHA512 8a125b6b2fb7fc20d69ca7d13c903a04e22a53e69d3afe9d605086da4a685f4545e7a345de0af8eb079041fdb3eb7b9f3c4555af968c7bc976096c6e40857584
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0zJ/h1+:Qi8kL3HxzcI+KzJ/h1+
- TLSH T1B1866C22B2E100A9D06A8131CF56863197F27C668FF1C7DFA149B2D91F727D07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry