General
- Target 2026-08-13_7d7e66b7aca62cd4b23eef66fd768f22_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 30.2MB
- Sample260813-k2lshawbph
- SHA256 b0a21c92846cae6085f151e89b8e58044ad4c5290592e9844e77250b750a6749
- MD5 7d7e66b7aca62cd4b23eef66fd768f22
- SHA1 437d3bda84d7e74f7c21b5fcbf92d811d7e7b006
- SHA512 7d6c6296453e7e7f4ed3094fd2cb045d760579a677902fb658ffe50311edd886de555205e664e264601e31fce75410f2b4bfe5e296985d509c415c9b6c4a323f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1++jrOOwH+vc8Vb618U68Vbb8Vb618U68X:2cD2cD1jrOB+1cD2cD1jrOB+v
- TLSH T165674B12A6958EE9C16FD470CA5666B29A337C464F309BCB4680FE193E336E05E3531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_7d7e66b7aca62cd4b23eef66fd768f22_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_7d7e66b7aca62cd4b23eef66fd768f22_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_7d7e66b7aca62cd4b23eef66fd768f22_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 30.2MB
- SHA256 b0a21c92846cae6085f151e89b8e58044ad4c5290592e9844e77250b750a6749
- MD5 7d7e66b7aca62cd4b23eef66fd768f22
- SHA1 437d3bda84d7e74f7c21b5fcbf92d811d7e7b006
- SHA512 7d6c6296453e7e7f4ed3094fd2cb045d760579a677902fb658ffe50311edd886de555205e664e264601e31fce75410f2b4bfe5e296985d509c415c9b6c4a323f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1++jrOOwH+vc8Vb618U68Vbb8Vb618U68X:2cD2cD1jrOB+1cD2cD1jrOB+v
- TLSH T165674B12A6958EE9C16FD470CA5666B29A337C464F309BCB4680FE193E336E05E3531F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry