General
- Target 2026-07-31_171a28ef4a87f5968f761cdbf1b070b8_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 23.0MB
- Sample260801-ahsftsbm5t
- SHA256 46e8eec98a765be0bcd199c7869ba892e75a9c6524a7620577d4c75b2b8db3aa
- MD5 171a28ef4a87f5968f761cdbf1b070b8
- SHA1 9a685489b9efea9489b795d801649060e60a0804
- SHA512 3f1c4a9b8ac69cadfc79131bada08afc39d2cd235db46ead31c9a95e217d95b9b589b2b62eec1bfd237ebdd62ea251c8683d5e3253310e84265eda9696dabc06
- SSDEEP 196608:Ji8kL3Hxi618U+i8kL3Hxi618UFi8kL3Hxi618U+i8kL3Hxi618UWho:FkL3RiOGkL3RiOtkL3RiOGkL3RiOKe
- TLSH T18D379F03B7D441E9E07EC534C6659632EA72BC520B20D6CF2699B61A1F73BD09F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_171a28ef4a87f5968f761cdbf1b070b8_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_171a28ef4a87f5968f761cdbf1b070b8_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_171a28ef4a87f5968f761cdbf1b070b8_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 23.0MB
- SHA256 46e8eec98a765be0bcd199c7869ba892e75a9c6524a7620577d4c75b2b8db3aa
- MD5 171a28ef4a87f5968f761cdbf1b070b8
- SHA1 9a685489b9efea9489b795d801649060e60a0804
- SHA512 3f1c4a9b8ac69cadfc79131bada08afc39d2cd235db46ead31c9a95e217d95b9b589b2b62eec1bfd237ebdd62ea251c8683d5e3253310e84265eda9696dabc06
- SSDEEP 196608:Ji8kL3Hxi618U+i8kL3Hxi618UFi8kL3Hxi618U+i8kL3Hxi618UWho:FkL3RiOGkL3RiOtkL3RiOGkL3RiOKe
- TLSH T18D379F03B7D441E9E07EC534C6659632EA72BC520B20D6CF2699B61A1F73BD09F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry