General
- Target 2026-08-13_d55490b98ceb0ab7ca3cb1975ff54f57_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 30.1MB
- Sample260813-dsakjs1ald
- SHA256 885569adb4182989fc138c121d67459a734dbbae5fbcc697c01a98b3b2f09a9a
- MD5 d55490b98ceb0ab7ca3cb1975ff54f57
- SHA1 0fe344bcce00424fb5482b0b18807cef4c4e3097
- SHA512 6ce95c2a23587b23caf3583d02e5f2ab3abcea568663ed2af52d62b48453f377651bf4d676158d531a10a883a801a1d3ebd04cd0ff2ccce6c82f8509528e932b
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1++jrOOwH+vc8Vb618U68Vbb8Vb618U68j:2cD2cD1jrOB+1cD2cD1jrOB+7
- TLSH T17B674B12A6958EE9C16FD470CA5666B29A337C464F309BCB4680FE193E336E05E3531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_d55490b98ceb0ab7ca3cb1975ff54f57_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_d55490b98ceb0ab7ca3cb1975ff54f57_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d55490b98ceb0ab7ca3cb1975ff54f57_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 30.1MB
- SHA256 885569adb4182989fc138c121d67459a734dbbae5fbcc697c01a98b3b2f09a9a
- MD5 d55490b98ceb0ab7ca3cb1975ff54f57
- SHA1 0fe344bcce00424fb5482b0b18807cef4c4e3097
- SHA512 6ce95c2a23587b23caf3583d02e5f2ab3abcea568663ed2af52d62b48453f377651bf4d676158d531a10a883a801a1d3ebd04cd0ff2ccce6c82f8509528e932b
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1++jrOOwH+vc8Vb618U68Vbb8Vb618U68j:2cD2cD1jrOB+1cD2cD1jrOB+7
- TLSH T17B674B12A6958EE9C16FD470CA5666B29A337C464F309BCB4680FE193E336E05E3531F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry