General
- Target 2026-08-04_985efd654c1b38078bc6cf7e6e5c2142_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar
- Size 5.7MB
- Sample260804-xt5xmafe74
- SHA256 470ee6c39425f83cb6a05c560e0e823f86e7e5e74dfbed2a4989f54c0cf16dfe
- MD5 985efd654c1b38078bc6cf7e6e5c2142
- SHA1 9a50149959cc28f6a4e066dc62ddeb08a8afc131
- SHA512 645090982ab67ef2a5267a4d32f027968df6dd6dc44025a27580eb3a32e59aaa19c2477bc024ba3553dc8197bb83ddeae53865d539dfb2e93f591b65fb666fcf
- SSDEEP 49152:xWsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybs:xzKUgTH2M2m9UMpu1QfLczqssnKSE
- TLSH T14956B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_985efd654c1b38078bc6cf7e6e5c2142_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_985efd654c1b38078bc6cf7e6e5c2142_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_985efd654c1b38078bc6cf7e6e5c2142_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar
- Size 5.7MB
- SHA256 470ee6c39425f83cb6a05c560e0e823f86e7e5e74dfbed2a4989f54c0cf16dfe
- MD5 985efd654c1b38078bc6cf7e6e5c2142
- SHA1 9a50149959cc28f6a4e066dc62ddeb08a8afc131
- SHA512 645090982ab67ef2a5267a4d32f027968df6dd6dc44025a27580eb3a32e59aaa19c2477bc024ba3553dc8197bb83ddeae53865d539dfb2e93f591b65fb666fcf
- SSDEEP 49152:xWsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybs:xzKUgTH2M2m9UMpu1QfLczqssnKSE
- TLSH T14956B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application