General
- Target 2026-08-01_a1306bfa4c6f514d169eeaaf7fc4adee_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.0MB
- Sample260802-afcbtszfjd
- SHA256 0e2cc70e2105e9045af50ce80b47fab0e5dfc97d5cec571d336fdff72b2f1069
- MD5 a1306bfa4c6f514d169eeaaf7fc4adee
- SHA1 6a18c03e7bf98c804a1de85805b28df73b4ad98a
- SHA512 16df16fe6a84a59eba5aa87fd0c968a4f6d72ba16d9a71f928068ec68ed693297ae8fd47c2177a4900ea431576a25050785127e2466b4ff195e8f33a18be5363
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C1u5x6M1WoDDklJ6qqUHxqPFb:Qi8kL3Hxz7/h1+C6i8kL3Hxq
- TLSH T1BFB69F13F6E441A9E07AC534C6669532DA72BC460721D6CF3699F61A2F33BD09B36323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a1306bfa4c6f514d169eeaaf7fc4adee_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a1306bfa4c6f514d169eeaaf7fc4adee_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a1306bfa4c6f514d169eeaaf7fc4adee_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.0MB
- SHA256 0e2cc70e2105e9045af50ce80b47fab0e5dfc97d5cec571d336fdff72b2f1069
- MD5 a1306bfa4c6f514d169eeaaf7fc4adee
- SHA1 6a18c03e7bf98c804a1de85805b28df73b4ad98a
- SHA512 16df16fe6a84a59eba5aa87fd0c968a4f6d72ba16d9a71f928068ec68ed693297ae8fd47c2177a4900ea431576a25050785127e2466b4ff195e8f33a18be5363
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C1u5x6M1WoDDklJ6qqUHxqPFb:Qi8kL3Hxz7/h1+C6i8kL3Hxq
- TLSH T1BFB69F13F6E441A9E07AC534C6669532DA72BC460721D6CF3699F61A2F33BD09B36323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry