General
- Target 2026-08-03_dff039756eba41057db9ac4ea006fe7a_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 15.5MB
- Sample260803-t7capafl9w
- SHA256 e0a4a1e98a7df8c52c23b51586fedaede2a9430ce0f5da01330c40832500210f
- MD5 dff039756eba41057db9ac4ea006fe7a
- SHA1 a70200ced441a56001ffdfac71d281376321e439
- SHA512 bd16c53d057117c0894d983eba905cba762c006c26aa16b39b285e9f519544d5cea32b60f0daaaa10b3779217cd2c42276ad1ecb0cd841cc6a88792c275976a7
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vV2:2cD2cDxjrOB+k
- TLSH T1B5F64A12A6D58EE8D16FD470CA5666729A337C464F309BCF4680BE193E326E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_dff039756eba41057db9ac4ea006fe7a_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_dff039756eba41057db9ac4ea006fe7a_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_dff039756eba41057db9ac4ea006fe7a_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 15.5MB
- SHA256 e0a4a1e98a7df8c52c23b51586fedaede2a9430ce0f5da01330c40832500210f
- MD5 dff039756eba41057db9ac4ea006fe7a
- SHA1 a70200ced441a56001ffdfac71d281376321e439
- SHA512 bd16c53d057117c0894d983eba905cba762c006c26aa16b39b285e9f519544d5cea32b60f0daaaa10b3779217cd2c42276ad1ecb0cd841cc6a88792c275976a7
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vV2:2cD2cDxjrOB+k
- TLSH T1B5F64A12A6D58EE8D16FD470CA5666729A337C464F309BCF4680BE193E326E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry