General
- Target 2026-08-16_9b79fb319256dae8902342797d59f745_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 8.9MB
- Sample260816-emb2vsyhme
- SHA256 2206cc0d8b6fa4db6133a6b0bb0e615c0786e0ce42ca982c1b740236c1d8f4f7
- MD5 9b79fb319256dae8902342797d59f745
- SHA1 1f097e4a85cabab44c02236366127c57dec99023
- SHA512 1908211e3755a42b0af092a9f98400e6227bc6f5817e43cb894f75d5eaf0e89806e06d5937ef0bcda8c4107911532b500d92fd036005ad6faa9b59b4e5b39d74
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7zGu5x6M1WoDDklJ6qqUHxqPF7z2:Ji8kL3Hxgdi8kL3Hxg2
- TLSH T194968E43F6D440A9E06E8634D6659632EA72BC421760D6CF36D9F62E1F32BC09B36713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9b79fb319256dae8902342797d59f745_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9b79fb319256dae8902342797d59f745_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9b79fb319256dae8902342797d59f745_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 8.9MB
- SHA256 2206cc0d8b6fa4db6133a6b0bb0e615c0786e0ce42ca982c1b740236c1d8f4f7
- MD5 9b79fb319256dae8902342797d59f745
- SHA1 1f097e4a85cabab44c02236366127c57dec99023
- SHA512 1908211e3755a42b0af092a9f98400e6227bc6f5817e43cb894f75d5eaf0e89806e06d5937ef0bcda8c4107911532b500d92fd036005ad6faa9b59b4e5b39d74
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7zGu5x6M1WoDDklJ6qqUHxqPF7z2:Ji8kL3Hxgdi8kL3Hxg2
- TLSH T194968E43F6D440A9E06E8634D6659632EA72BC421760D6CF36D9F62E1F32BC09B36713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry