General
- Target 2026-08-20_09008b6fa0ac5d8b2ea3d13ef4260cf6_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.1MB
- Sample260820-h7gdvssbrd
- SHA256 5f5fc1ba490ce9f22276452659de8da1dd38892189bf7b6fdaf9310128ff819c
- MD5 09008b6fa0ac5d8b2ea3d13ef4260cf6
- SHA1 be9a76c76fc1a49f72a27c8ca1050fb7c478d0ed
- SHA512 d9b3f2c8b528e205f11e2ee5fd5ea53609e67290e64b35a3b28a6d014dbee5ddc96f6697b99a963c5141fc6f5f305719df156465ccd568b09b27dd0c8274e156
- SSDEEP 196608:Ji8kL3HxgtCKmd0m/h1+JWyZ/K0ttYVAAT:FkL3Rg/qpyZ/K0ttYZT
- TLSH T193D67D03F6A441A9E06AC174CA629631EB727C4A4BF195DF3244B6D92F33BD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_09008b6fa0ac5d8b2ea3d13ef4260cf6_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_09008b6fa0ac5d8b2ea3d13ef4260cf6_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_09008b6fa0ac5d8b2ea3d13ef4260cf6_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.1MB
- SHA256 5f5fc1ba490ce9f22276452659de8da1dd38892189bf7b6fdaf9310128ff819c
- MD5 09008b6fa0ac5d8b2ea3d13ef4260cf6
- SHA1 be9a76c76fc1a49f72a27c8ca1050fb7c478d0ed
- SHA512 d9b3f2c8b528e205f11e2ee5fd5ea53609e67290e64b35a3b28a6d014dbee5ddc96f6697b99a963c5141fc6f5f305719df156465ccd568b09b27dd0c8274e156
- SSDEEP 196608:Ji8kL3HxgtCKmd0m/h1+JWyZ/K0ttYVAAT:FkL3Rg/qpyZ/K0ttYZT
- TLSH T193D67D03F6A441A9E06AC174CA629631EB727C4A4BF195DF3244B6D92F33BD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry