General
- Target 2026-08-10_481274d72674dde8d97bd27499ddc1e5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 8.9MB
- Sample260810-pesdzsyapf
- SHA256 371a4f9d52f227007cb5176cc5259b362943c7ed764552c0a66a3b4455fc175b
- MD5 481274d72674dde8d97bd27499ddc1e5
- SHA1 2890ca607d1a601baad8015d8d99aa88920b063e
- SHA512 bda423b0f0a559d5c013207459043f5fa165f88105c521fa218b3e18fca005e4205f6889ac9e78464fc2983530dc23142e052468cdcbe0207d166005905cdf15
- SSDEEP 49152:yZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4Ol:yevoirV0t/iLwHft8vAjTIyLapIS
- TLSH T1B396162232D58FE9C05FD034CE5225B546637C9A8FB19BDF28407EA93A756E07A3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_481274d72674dde8d97bd27499ddc1e5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_481274d72674dde8d97bd27499ddc1e5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_481274d72674dde8d97bd27499ddc1e5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 8.9MB
- SHA256 371a4f9d52f227007cb5176cc5259b362943c7ed764552c0a66a3b4455fc175b
- MD5 481274d72674dde8d97bd27499ddc1e5
- SHA1 2890ca607d1a601baad8015d8d99aa88920b063e
- SHA512 bda423b0f0a559d5c013207459043f5fa165f88105c521fa218b3e18fca005e4205f6889ac9e78464fc2983530dc23142e052468cdcbe0207d166005905cdf15
- SSDEEP 49152:yZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4Ol:yevoirV0t/iLwHft8vAjTIyLapIS
- TLSH T1B396162232D58FE9C05FD034CE5225B546637C9A8FB19BDF28407EA93A756E07A3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory