General
- Target 2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 31.4MB
- Sample260817-cjs5vsdl9t
- SHA256 fc0ca4a8fe12e1b4b2d64585e831ecabc343abb0c68c82e3bfbd352145da0bb9
- MD5 7c2f6541881463a6641956752a89acce
- SHA1 16ae05e65a9c295b295c7005657f10332d34cf15
- SHA512 cd7b00cab977128141020e1d78cdcaf738f03d41732d87b2c55450196daef13f2e636e6b4a4e4c904ffe786c08d8de7db8440ee2f89b54f826c7d9332449a8ad
- SSDEEP 786432:FkL3RoGkL3Ro+fjpgkL3RoGkL3Ro+fjpB:+Ro/Ro+fj/Ro/Ro+fjz
- TLSH T178779E03F6E541E9E06EC174C7659632EA72BC425B30A6CF2294B71A1F73BD05B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_7c2f6541881463a6641956752a89acce_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 31.4MB
- SHA256 fc0ca4a8fe12e1b4b2d64585e831ecabc343abb0c68c82e3bfbd352145da0bb9
- MD5 7c2f6541881463a6641956752a89acce
- SHA1 16ae05e65a9c295b295c7005657f10332d34cf15
- SHA512 cd7b00cab977128141020e1d78cdcaf738f03d41732d87b2c55450196daef13f2e636e6b4a4e4c904ffe786c08d8de7db8440ee2f89b54f826c7d9332449a8ad
- SSDEEP 786432:FkL3RoGkL3Ro+fjpgkL3RoGkL3Ro+fjpB:+Ro/Ro+fj/Ro/Ro+fjz
- TLSH T178779E03F6E541E9E06EC174C7659632EA72BC425B30A6CF2294B71A1F73BD05B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry