General
- Target 2026-08-13_5cf7634c8a3f1e8748a7db3787c84e60_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 64.4MB
- Sample260813-fg7f9asbla
- SHA256 e02c8606aed16218065667b1002d62097487e5fb952bd0b0305e00ae629cf787
- MD5 5cf7634c8a3f1e8748a7db3787c84e60
- SHA1 0a3d98ddf63c42789ec34846613cc718be483aba
- SHA512 857a3f4cd5558090aef0a151cba64bf598d015d5410d5b396884694730e46fd740f556f8849724344793d7efddf93a4c47a0ef5611a37deb7123f36a30cc297e
- SSDEEP 1572864:+R/Z/K0ttYRiR/Z/K0ttYRjn7R/Z/K0ttYRiR/Z/K0ttYRjnuR/Z/K0ttYRiR/Zo:+kRikRjn7kRikRjnukRikRjn/
- TLSH T1C5E79E03F6E441E9E06AD134CA759632EB72BC464BB1A5DF224472991F33BD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_5cf7634c8a3f1e8748a7db3787c84e60_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_5cf7634c8a3f1e8748a7db3787c84e60_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_5cf7634c8a3f1e8748a7db3787c84e60_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 64.4MB
- SHA256 e02c8606aed16218065667b1002d62097487e5fb952bd0b0305e00ae629cf787
- MD5 5cf7634c8a3f1e8748a7db3787c84e60
- SHA1 0a3d98ddf63c42789ec34846613cc718be483aba
- SHA512 857a3f4cd5558090aef0a151cba64bf598d015d5410d5b396884694730e46fd740f556f8849724344793d7efddf93a4c47a0ef5611a37deb7123f36a30cc297e
- SSDEEP 1572864:+R/Z/K0ttYRiR/Z/K0ttYRjn7R/Z/K0ttYRiR/Z/K0ttYRjnuR/Z/K0ttYRiR/Zo:+kRikRjn7kRikRjnukRikRjn/
- TLSH T1C5E79E03F6E441E9E06AD134CA759632EB72BC464BB1A5DF224472991F33BD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry