General
- Target 2026-08-20_8eb7f12a0b6d481fa8c4fa2018c0611d_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 16.0MB
- Sample260820-v31cdseg83
- SHA256 6ae7477b584a538fab82b43374c30c1291060746e26cfddc8ac40ead252d5ee4
- MD5 8eb7f12a0b6d481fa8c4fa2018c0611d
- SHA1 7eeb13065fcb20ec81ad761f144209ac0feabb8d
- SHA512 a6058727bf38ff2d633bbbfb6e36db9bc9ba82901599b0b898437bf0f6e59d7318048c1b9125057e81a78355355c15c8e847b0cf6c5e01c56ddaead2ea9840d5
- SSDEEP 196608:Ji8kL3Hx/cI4/h1+ZDXyi8kL3Hx/cI4/h1+ZDXiALO:FkL3RU0mkL3RU0SoO
- TLSH T13A076B12B2E100A9D06AC131CF568631E7B27C564BF096DF6285B2D92F73BD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_8eb7f12a0b6d481fa8c4fa2018c0611d_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_8eb7f12a0b6d481fa8c4fa2018c0611d_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_8eb7f12a0b6d481fa8c4fa2018c0611d_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 16.0MB
- SHA256 6ae7477b584a538fab82b43374c30c1291060746e26cfddc8ac40ead252d5ee4
- MD5 8eb7f12a0b6d481fa8c4fa2018c0611d
- SHA1 7eeb13065fcb20ec81ad761f144209ac0feabb8d
- SHA512 a6058727bf38ff2d633bbbfb6e36db9bc9ba82901599b0b898437bf0f6e59d7318048c1b9125057e81a78355355c15c8e847b0cf6c5e01c56ddaead2ea9840d5
- SSDEEP 196608:Ji8kL3Hx/cI4/h1+ZDXyi8kL3Hx/cI4/h1+ZDXiALO:FkL3RU0mkL3RU0SoO
- TLSH T13A076B12B2E100A9D06AC131CF568631E7B27C564BF096DF6285B2D92F73BD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry