General
- Target 2026-08-20_6dc2fb1975b6c95e365aa3ccf90af2e9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 10.4MB
- Sample260820-watvkssdpc
- SHA256 3d6c39a993a478d2b0e33af4f614f98e2e74e82a40243f281dd02d912f80e894
- MD5 6dc2fb1975b6c95e365aa3ccf90af2e9
- SHA1 2675cbe8b3308388917cbd80c9c42f781af09bf3
- SHA512 78a74463407ab92304a7b13003cca5e6fb48c51e0e8a86b1bfa04f4dcece730098c3e5d85bf0ab50ac86d11b438709923c5d16b62f06f36050a95744c7c42ebc
- SSDEEP 98304:ne5x6c19NhS9YvofFhHZh+rHbsDVd4klJXopRWjot/h1+:A3vSh/DVakLXWuot/h1+
- TLSH T1B7B68E17F6A441E9E07AC174CA569236EB727C4507B196DF2280B71A2E33BD07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_6dc2fb1975b6c95e365aa3ccf90af2e9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_6dc2fb1975b6c95e365aa3ccf90af2e9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_6dc2fb1975b6c95e365aa3ccf90af2e9_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 10.4MB
- SHA256 3d6c39a993a478d2b0e33af4f614f98e2e74e82a40243f281dd02d912f80e894
- MD5 6dc2fb1975b6c95e365aa3ccf90af2e9
- SHA1 2675cbe8b3308388917cbd80c9c42f781af09bf3
- SHA512 78a74463407ab92304a7b13003cca5e6fb48c51e0e8a86b1bfa04f4dcece730098c3e5d85bf0ab50ac86d11b438709923c5d16b62f06f36050a95744c7c42ebc
- SSDEEP 98304:ne5x6c19NhS9YvofFhHZh+rHbsDVd4klJXopRWjot/h1+:A3vSh/DVakLXWuot/h1+
- TLSH T1B7B68E17F6A441E9E07AC174CA569236EB727C4507B196DF2280B71A2E33BD07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry