General
- Target 2026-08-13_4d4b04f8014e51a21428593c10f50c30_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 64.2MB
- Sample260813-fp2wqsgh52
- SHA256 8ab0952389dbc3b2af2e03b8bc6cacef74380ec323f9d5ad834ac8983327e579
- MD5 4d4b04f8014e51a21428593c10f50c30
- SHA1 ee9b932c12844c61eaf145d923aea3011c5ab0d4
- SHA512 84571a5e9e9d0ea6121db210b3ab58611896c296a07d8a085b5232afde668d82986fdb18587f764df7655a893b2c4b5d4a90b67b9ea4daaf2a7efb74fa3e625c
- SSDEEP 1572864:JRYowRYoJRYowRYonwRYowRYoJRYowRYon:J6ow6oJ6ow6onw6ow6oJ6ow6on
- TLSH T150E75B2272E200A9D15E8131DF16863197E17C668FF0D7DFA159B2CA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_4d4b04f8014e51a21428593c10f50c30_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_4d4b04f8014e51a21428593c10f50c30_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_4d4b04f8014e51a21428593c10f50c30_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 64.2MB
- SHA256 8ab0952389dbc3b2af2e03b8bc6cacef74380ec323f9d5ad834ac8983327e579
- MD5 4d4b04f8014e51a21428593c10f50c30
- SHA1 ee9b932c12844c61eaf145d923aea3011c5ab0d4
- SHA512 84571a5e9e9d0ea6121db210b3ab58611896c296a07d8a085b5232afde668d82986fdb18587f764df7655a893b2c4b5d4a90b67b9ea4daaf2a7efb74fa3e625c
- SSDEEP 1572864:JRYowRYoJRYowRYonwRYowRYoJRYowRYon:J6ow6oJ6ow6onw6ow6oJ6ow6on
- TLSH T150E75B2272E200A9D15E8131DF16863197E17C668FF0D7DFA159B2CA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry