General
- Target 2026-08-19_f7d4a7527b635ac661821bb753c68ecc_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.2MB
- Sample260819-va138adr8w
- SHA256 f3c88bcbb18016e13b0148d845075867f45d5ec04424ff355ac80b3d6797230b
- MD5 f7d4a7527b635ac661821bb753c68ecc
- SHA1 dc2a799869217c4de2152536cad4551678ff89d7
- SHA512 09166771846edfdbdb3fa55827505e753a039ac68c83666d1cfe0c6220dea1701ac4ef606d881108b682da614ea8e52d32b1500b6dfbd3acf78198ea76de77d2
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7z+ezSC6v2XMHE0oAaldmdmnp:Ji8kL3HxgtCKmd0
- TLSH T103868E03F6A441AAD06AC134CA569631EB727C4507F196DF3285B6D92F33BD07B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f7d4a7527b635ac661821bb753c68ecc_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f7d4a7527b635ac661821bb753c68ecc_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f7d4a7527b635ac661821bb753c68ecc_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.2MB
- SHA256 f3c88bcbb18016e13b0148d845075867f45d5ec04424ff355ac80b3d6797230b
- MD5 f7d4a7527b635ac661821bb753c68ecc
- SHA1 dc2a799869217c4de2152536cad4551678ff89d7
- SHA512 09166771846edfdbdb3fa55827505e753a039ac68c83666d1cfe0c6220dea1701ac4ef606d881108b682da614ea8e52d32b1500b6dfbd3acf78198ea76de77d2
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7z+ezSC6v2XMHE0oAaldmdmnp:Ji8kL3HxgtCKmd0
- TLSH T103868E03F6A441AAD06AC134CA569631EB727C4507F196DF3285B6D92F33BD07B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry