General
- Target 2026-08-21_e2d173bc596dd70078dcd485e44ae45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.8MB
- Sample260822-a4e3mael4s
- SHA256 1411798b656da59d35ef395d472373030f51d670b28e426f172d4aa67a96d28f
- MD5 e2d173bc596dd70078dcd485e44ae45a
- SHA1 155409299fdf1517b98c224500933a8e069f9cb2
- SHA512 731ef24eb0dba24d17a04da136eca74504c7777afb7834b3afe2520a4cb8fdf4f1b36a25d35c06b321329a17556a5946e60db701cd510a0b828de8e5f6b80abf
- SSDEEP 786432:FkL3RoGkL3RoMjkL3RoGkL3RoMvkL3RoGkL3RoMjkL3RoGkL3RoM+:+Ro/RoMURo/RoMoRo/RoMURo/RoM+
- TLSH T165C79F03F6D540E9E06EC534C6569632EA72BC460B20E7DF2694B61A2F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_e2d173bc596dd70078dcd485e44ae45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_e2d173bc596dd70078dcd485e44ae45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_e2d173bc596dd70078dcd485e44ae45a_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.8MB
- SHA256 1411798b656da59d35ef395d472373030f51d670b28e426f172d4aa67a96d28f
- MD5 e2d173bc596dd70078dcd485e44ae45a
- SHA1 155409299fdf1517b98c224500933a8e069f9cb2
- SHA512 731ef24eb0dba24d17a04da136eca74504c7777afb7834b3afe2520a4cb8fdf4f1b36a25d35c06b321329a17556a5946e60db701cd510a0b828de8e5f6b80abf
- SSDEEP 786432:FkL3RoGkL3RoMjkL3RoGkL3RoMvkL3RoGkL3RoMjkL3RoGkL3RoM+:+Ro/RoMURo/RoMoRo/RoMURo/RoM+
- TLSH T165C79F03F6D540E9E06EC534C6569632EA72BC460B20E7DF2694B61A2F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry