General
- Target 2026-08-22_d5575f805022998f17b05b5ce27f25c7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry
- Size 13.8MB
- Sample260822-3jaavsvybs
- SHA256 b8b3706ab2038f78553d9c65889d9772266077ab2396f85b42e80b39a0406a02
- MD5 d5575f805022998f17b05b5ce27f25c7
- SHA1 3ba66369549b3b1b3e487338028222158e3793e6
- SHA512 4415ac91e490788bb91768ca5bff94dbe4045c11d805ca989dcbaa432f5737b5dc3e8299686ca5f5138aa488161f8d093e4ea4308ebd728d3b6aef3652f1a027
- SSDEEP 196608:Ji8kL3Hxi+WyZ/K0ttYVAei8kL3Hxi+WyZ/K0ttYVA9cGa:FkL3Ri5yZ/K0ttYdkL3Ri5yZ/K0ttYf
- TLSH T19CE69E03F6D500EDE06EC13497669632EA72BC461B20F6DF2695B6162F33BD09B39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_d5575f805022998f17b05b5ce27f25c7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_d5575f805022998f17b05b5ce27f25c7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_d5575f805022998f17b05b5ce27f25c7_akira_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar_wannacry
- Size 13.8MB
- SHA256 b8b3706ab2038f78553d9c65889d9772266077ab2396f85b42e80b39a0406a02
- MD5 d5575f805022998f17b05b5ce27f25c7
- SHA1 3ba66369549b3b1b3e487338028222158e3793e6
- SHA512 4415ac91e490788bb91768ca5bff94dbe4045c11d805ca989dcbaa432f5737b5dc3e8299686ca5f5138aa488161f8d093e4ea4308ebd728d3b6aef3652f1a027
- SSDEEP 196608:Ji8kL3Hxi+WyZ/K0ttYVAei8kL3Hxi+WyZ/K0ttYVA9cGa:FkL3Ri5yZ/K0ttYdkL3Ri5yZ/K0ttYf
- TLSH T19CE69E03F6D500EDE06EC13497669632EA72BC461B20F6DF2695B6162F33BD09B39712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry