General
- Target 2026-08-13_c6164ac20693876908c038a3a6000860_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 35.5MB
- Sample260813-d41aca1brf
- SHA256 e91d5db19c07329a06b49ddb46d7dce7742bc7439f2fa42ab815aa59bcae827f
- MD5 c6164ac20693876908c038a3a6000860
- SHA1 497ccdc68f04750ef6fd2f475060b6c5d063039e
- SHA512 1b134dc8e89c350fccfb1b47dbfaf8867c5af6ab034701cc8848333c147b230a22acb66e25eef6948c2e217146d4543c67ecf8b7d2e2d7208d839beba5aecac1
- SSDEEP 786432:FkL3R6qEskL3R6qE4GkL3R6qEskL3R6qE4v:+R6qE1R6qE4/R6qE1R6qE4v
- TLSH T14A876B13B2E500A9D05AC134CF168231D6E2BC654BF097DF6294B6DA2F72BD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_c6164ac20693876908c038a3a6000860_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_c6164ac20693876908c038a3a6000860_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_c6164ac20693876908c038a3a6000860_akira_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 35.5MB
- SHA256 e91d5db19c07329a06b49ddb46d7dce7742bc7439f2fa42ab815aa59bcae827f
- MD5 c6164ac20693876908c038a3a6000860
- SHA1 497ccdc68f04750ef6fd2f475060b6c5d063039e
- SHA512 1b134dc8e89c350fccfb1b47dbfaf8867c5af6ab034701cc8848333c147b230a22acb66e25eef6948c2e217146d4543c67ecf8b7d2e2d7208d839beba5aecac1
- SSDEEP 786432:FkL3R6qEskL3R6qE4GkL3R6qEskL3R6qE4v:+R6qE1R6qE4/R6qE1R6qE4v
- TLSH T14A876B13B2E500A9D05AC134CF168231D6E2BC654BF097DF6294B6DA2F72BD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry