General
- Target 2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 16.3MB
- Sample260820-fps9labd93
- SHA256 8fe061a723b3687c16a0b13a9f04b09e95df4d5a8c45659469a4c82af8328759
- MD5 f8ff656d6a2d8bf4658d77db34aa124f
- SHA1 67c4461ce2a8892909d20f420d520d11f7bd21d8
- SHA512 add746b964ece71b107858d41bdab210835de3f8880c62fd412b25bf2091e824c4ea49ccf3c11dcb9e4e4587d26c6b108f0969054d36da59628219324f17fdb0
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7z+ezSC6v2XMHE0oAaldmdmnpgu5x6M1WoDDklJ6W:Ji8kL3HxgtCKmd0hi8kL3HxgtCKmd0Yb
- TLSH T1CB078E03F6A441AAD06AC134CA569631EB727C4507F196DF3285B6D92F33BD07B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f8ff656d6a2d8bf4658d77db34aa124f_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 16.3MB
- SHA256 8fe061a723b3687c16a0b13a9f04b09e95df4d5a8c45659469a4c82af8328759
- MD5 f8ff656d6a2d8bf4658d77db34aa124f
- SHA1 67c4461ce2a8892909d20f420d520d11f7bd21d8
- SHA512 add746b964ece71b107858d41bdab210835de3f8880c62fd412b25bf2091e824c4ea49ccf3c11dcb9e4e4587d26c6b108f0969054d36da59628219324f17fdb0
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7z+ezSC6v2XMHE0oAaldmdmnpgu5x6M1WoDDklJ6W:Ji8kL3HxgtCKmd0hi8kL3HxgtCKmd0Yb
- TLSH T1CB078E03F6A441AAD06AC134CA569631EB727C4507F196DF3285B6D92F33BD07B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry