General
- Target 2026-08-20_9322907e41eb521b989d8f43da3061d1_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 64.4MB
- Sample260820-gc8deser7t
- SHA256 7178973bce4eb8f4ae79c9c90467b2825a52421acd5e9176a96dc7485e431fc4
- MD5 9322907e41eb521b989d8f43da3061d1
- SHA1 30917a8c42bcf2a706e2182f59234dc7a6e8df2d
- SHA512 1f5973c07ad9a23d63609a903a4723eed42c59a51893bd1d5ddbe6cda8dd53051a882d58dcd1b1ab0571b6162e47b7ed2bee6352bb8a0c70cc621e3fb34ba3e6
- SSDEEP 1572864:JRYowRYoJRYowRYoJlDRYowRYoJRYowRYoJl0:J6ow6oJ6ow6oPD6ow6oJ6ow6oP0
- TLSH T1FEE76C22B2E200A9D15D8131DF16863197E17C668FF0D7DFA158B2DA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_9322907e41eb521b989d8f43da3061d1_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9322907e41eb521b989d8f43da3061d1_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9322907e41eb521b989d8f43da3061d1_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 64.4MB
- SHA256 7178973bce4eb8f4ae79c9c90467b2825a52421acd5e9176a96dc7485e431fc4
- MD5 9322907e41eb521b989d8f43da3061d1
- SHA1 30917a8c42bcf2a706e2182f59234dc7a6e8df2d
- SHA512 1f5973c07ad9a23d63609a903a4723eed42c59a51893bd1d5ddbe6cda8dd53051a882d58dcd1b1ab0571b6162e47b7ed2bee6352bb8a0c70cc621e3fb34ba3e6
- SSDEEP 1572864:JRYowRYoJRYowRYoJlDRYowRYoJRYowRYoJl0:J6ow6oJ6ow6oPD6ow6oJ6ow6oP0
- TLSH T1FEE76C22B2E200A9D15D8131DF16863197E17C668FF0D7DFA158B2DA1F726C07A3A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry