General
- Target 2026-07-31_64ad2d8962384725bce2fb36b5dfab1d_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.9MB
- Sample260731-wp5wdsdm81
- SHA256 b66fc42c7f67f63435aae77536bf8d5aceabbdbccb9e49cc0887f593f6240a60
- MD5 64ad2d8962384725bce2fb36b5dfab1d
- SHA1 912798e29408ee0f6bdb81942a5e9fae2cba6cd1
- SHA512 da540597278a19f9a054db970f4ca26dec29b1e6d38d30c3978c4904e4c48c2148b61ea145b1f14a63855fe76888b060861ce37c505bf19da1ea24f9749e2f09
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0z0u5x6M1WoDDklJ6qqUHxqPFeLapIihq:Qi8kL3HxzcI+KzHi8kL3HxzcI+Kz7b
- TLSH T170F65B2272E200A9D15E8131DF16863197E17C668FF0D7DFA159B2CA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_64ad2d8962384725bce2fb36b5dfab1d_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_64ad2d8962384725bce2fb36b5dfab1d_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_64ad2d8962384725bce2fb36b5dfab1d_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.9MB
- SHA256 b66fc42c7f67f63435aae77536bf8d5aceabbdbccb9e49cc0887f593f6240a60
- MD5 64ad2d8962384725bce2fb36b5dfab1d
- SHA1 912798e29408ee0f6bdb81942a5e9fae2cba6cd1
- SHA512 da540597278a19f9a054db970f4ca26dec29b1e6d38d30c3978c4904e4c48c2148b61ea145b1f14a63855fe76888b060861ce37c505bf19da1ea24f9749e2f09
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLapIihx0z0u5x6M1WoDDklJ6qqUHxqPFeLapIihq:Qi8kL3HxzcI+KzHi8kL3HxzcI+Kz7b
- TLSH T170F65B2272E200A9D15E8131DF16863197E17C668FF0D7DFA159B2CA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry