General
- Target 2026-08-21_d404c87e4031ccf179e067f7f994e990_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.8MB
- Sample260821-efty4agj2x
- SHA256 5778bb828e3b7f06b08a707ee441945a047a5263a1752b08bff050c8aa7a6d00
- MD5 d404c87e4031ccf179e067f7f994e990
- SHA1 b63346b1ac48fd5052cb4a37e5368d60c76f4e56
- SHA512 ad8502d95353c98d2f592960457ca35e8c155340234fd865d83d942130545260ccbc3af12e63ecd470b2185b6d6a5a6dfaced7abb1e75aa9523b9b4e1c32a7a0
- SSDEEP 786432:FkL3RoGkL3RoMjkL3RoGkL3RoMvkL3RoGkL3RoMjkL3RoGkL3RoMb:+Ro/RoMURo/RoMoRo/RoMURo/RoMb
- TLSH T134C79F03F6D540E9E06EC534C6569632EA72BC460B20E7DF2694B61A2F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_d404c87e4031ccf179e067f7f994e990_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_d404c87e4031ccf179e067f7f994e990_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_d404c87e4031ccf179e067f7f994e990_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.8MB
- SHA256 5778bb828e3b7f06b08a707ee441945a047a5263a1752b08bff050c8aa7a6d00
- MD5 d404c87e4031ccf179e067f7f994e990
- SHA1 b63346b1ac48fd5052cb4a37e5368d60c76f4e56
- SHA512 ad8502d95353c98d2f592960457ca35e8c155340234fd865d83d942130545260ccbc3af12e63ecd470b2185b6d6a5a6dfaced7abb1e75aa9523b9b4e1c32a7a0
- SSDEEP 786432:FkL3RoGkL3RoMjkL3RoGkL3RoMvkL3RoGkL3RoMjkL3RoGkL3RoMb:+Ro/RoMURo/RoMoRo/RoMURo/RoMb
- TLSH T134C79F03F6D540E9E06EC534C6569632EA72BC460B20E7DF2694B61A2F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry