General
- Target 2026-08-21_4e56f58c3bfe3fec2d7bac94a6607bdd_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.8MB
- Sample260822-sph5vazyht
- SHA256 e0e2bccc3b3652d2af2a1ffd5ddcecdb385da9e2d39b8917694e3936c9da1f13
- MD5 4e56f58c3bfe3fec2d7bac94a6607bdd
- SHA1 841f1e07edaf49b1339a5b4a00dcbe09357f6034
- SHA512 f70d1d0fdbaaa35bde86c13957bfa5976b9a8bd72428b5e7881234c2bbc0f5988b1a0ebefd8a1050e2eb79fdc29b7dea7ab5949bb1a7c4ca6206bf0518a41da1
- SSDEEP 786432:FkL3RoGkL3RoMjkL3RoGkL3RoMvkL3RoGkL3RoMjkL3RoGkL3RoM+:+Ro/RoMURo/RoMoRo/RoMURo/RoM+
- TLSH T159C79F03F6D540E9E06EC534C6569632EA72BC460B20E7DF2694B61A2F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_4e56f58c3bfe3fec2d7bac94a6607bdd_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4e56f58c3bfe3fec2d7bac94a6607bdd_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4e56f58c3bfe3fec2d7bac94a6607bdd_akira_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.8MB
- SHA256 e0e2bccc3b3652d2af2a1ffd5ddcecdb385da9e2d39b8917694e3936c9da1f13
- MD5 4e56f58c3bfe3fec2d7bac94a6607bdd
- SHA1 841f1e07edaf49b1339a5b4a00dcbe09357f6034
- SHA512 f70d1d0fdbaaa35bde86c13957bfa5976b9a8bd72428b5e7881234c2bbc0f5988b1a0ebefd8a1050e2eb79fdc29b7dea7ab5949bb1a7c4ca6206bf0518a41da1
- SSDEEP 786432:FkL3RoGkL3RoMjkL3RoGkL3RoMvkL3RoGkL3RoMjkL3RoGkL3RoM+:+Ro/RoMURo/RoMoRo/RoMURo/RoM+
- TLSH T159C79F03F6D540E9E06EC534C6569632EA72BC460B20E7DF2694B61A2F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry