General
- Target 2026-08-16_99f3c7b4166ce000095fd79a3529a541_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 17.1MB
- Sample260816-empmysbb38
- SHA256 37a18eb8b8294f118f8d58fec7f6d18716af88736d323885f9aba5c1a9c26acc
- MD5 99f3c7b4166ce000095fd79a3529a541
- SHA1 5e8ac3eb9b7d0046ca7a9db9ca57a5bda6907b91
- SHA512 d6a362c6f5f0e4cbea9c20bb8acc7f23f3138801a41aa7bd01bad4cce59f237ed7169140db7a38577840d132866f9efa13d5e8cbf2c75e161075d830f387d9e0
- SSDEEP 196608:Qi8kL3HxzcI+KzHi8kL3HxzcI+KzVoKA/h1+:IkL3RYNKjkL3RYNKZo
- TLSH T1E3076C23B2E100A9D06E8131CF56863197E27C658FF0D7DF6245B29A1F72BD07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_99f3c7b4166ce000095fd79a3529a541_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_99f3c7b4166ce000095fd79a3529a541_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_99f3c7b4166ce000095fd79a3529a541_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 17.1MB
- SHA256 37a18eb8b8294f118f8d58fec7f6d18716af88736d323885f9aba5c1a9c26acc
- MD5 99f3c7b4166ce000095fd79a3529a541
- SHA1 5e8ac3eb9b7d0046ca7a9db9ca57a5bda6907b91
- SHA512 d6a362c6f5f0e4cbea9c20bb8acc7f23f3138801a41aa7bd01bad4cce59f237ed7169140db7a38577840d132866f9efa13d5e8cbf2c75e161075d830f387d9e0
- SSDEEP 196608:Qi8kL3HxzcI+KzHi8kL3HxzcI+KzVoKA/h1+:IkL3RYNKjkL3RYNKZo
- TLSH T1E3076C23B2E100A9D06E8131CF56863197E27C658FF0D7DF6245B29A1F72BD07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry