General
- Target 2026-08-16_54f89b928013bedf1b71d7b0eafeb45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 56.4MB
- Sample260816-m335aach29
- SHA256 92d3373e4713ba0a3b3bcc3072c877da565106309a08d20aaa98f4c007425048
- MD5 54f89b928013bedf1b71d7b0eafeb45a
- SHA1 b286acd68242748fa22e76fd07be4b3d58c6c0b3
- SHA512 95e115aaf999dcad45c47c27a59ec738109ee510c93f5cfecf5a7feadb28a0455dca9ca96f879a142201ea67480a727dadaabec09505b393e713f6f3dfc0b5e2
- SSDEEP 786432:IkL3RYojkL3RYo+vkL3RYojkL3RYo+XE8c23pV2X+T:JRYoURYo+oRYoURYo+XEh2ZV2XG
- TLSH T1DCD74912B6E503E6D26A9534CB718231E7B17C1A4FB193BF5178B29E1F336D06E39212
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_54f89b928013bedf1b71d7b0eafeb45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_54f89b928013bedf1b71d7b0eafeb45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_54f89b928013bedf1b71d7b0eafeb45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 56.4MB
- SHA256 92d3373e4713ba0a3b3bcc3072c877da565106309a08d20aaa98f4c007425048
- MD5 54f89b928013bedf1b71d7b0eafeb45a
- SHA1 b286acd68242748fa22e76fd07be4b3d58c6c0b3
- SHA512 95e115aaf999dcad45c47c27a59ec738109ee510c93f5cfecf5a7feadb28a0455dca9ca96f879a142201ea67480a727dadaabec09505b393e713f6f3dfc0b5e2
- SSDEEP 786432:IkL3RYojkL3RYo+vkL3RYojkL3RYo+XE8c23pV2X+T:JRYoURYo+oRYoURYo+XEh2ZV2XG
- TLSH T1DCD74912B6E503E6D26A9534CB718231E7B17C1A4FB193BF5178B29E1F336D06E39212
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry