General
- Target 2026-08-22_a4bdb61af7e9007304480a54d87c17c9_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.3MB
- Sample260823-dvyedshb87
- SHA256 476253da5b17b48d65809a36c6e967b306decefdf4d2b80399a20cba4deae7dd
- MD5 a4bdb61af7e9007304480a54d87c17c9
- SHA1 d9caf937aeef97db827e1aeb07d2fd73911dedd4
- SHA512 fb6f7cd382d40125e2132d618e055c9c1758080dd710c59104960903c5ae15de3d05c9993854282d125d82e5554da606c1996f0f6d2ef7481e04171c80cf7ea7
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7KLapI4/h1+Z/nbXaPO/h1+TRQ:Ji8kL3Hx/cI4/h1+ZDXB/h1+Ta
- TLSH T177966B12B2E041A9D06AC035CF529635DBB27C564BF086DF2245B2D92F737D0BB3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a4bdb61af7e9007304480a54d87c17c9_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_a4bdb61af7e9007304480a54d87c17c9_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a4bdb61af7e9007304480a54d87c17c9_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.3MB
- SHA256 476253da5b17b48d65809a36c6e967b306decefdf4d2b80399a20cba4deae7dd
- MD5 a4bdb61af7e9007304480a54d87c17c9
- SHA1 d9caf937aeef97db827e1aeb07d2fd73911dedd4
- SHA512 fb6f7cd382d40125e2132d618e055c9c1758080dd710c59104960903c5ae15de3d05c9993854282d125d82e5554da606c1996f0f6d2ef7481e04171c80cf7ea7
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7KLapI4/h1+Z/nbXaPO/h1+TRQ:Ji8kL3Hx/cI4/h1+ZDXB/h1+Ta
- TLSH T177966B12B2E041A9D06AC035CF529635DBB27C564BF086DF2245B2D92F737D0BB3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry