General
- Target 2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 9.4MB
- Sample260823-she5lsaf33
- SHA256 d07898cc1801fee211c6cbd763f86ff688139ebf5f9ceeac0fc876afeea9a062
- MD5 f773e5127ba5f90a422e0ce136e3ae75
- SHA1 e5750eb1901b23c74739488306a1a4c45b1d3e4f
- SHA512 37beaa3ceb1bc938c3325d0238e5739c106b5181560626403b5728ca3191c931195e04a198b91b850144e5afb0c4fc61c9dbb69ebb5023f4c53474183cd59958
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7KLapI4/h1+Z/nbXaPO/h1+VnUm8UO:Ji8kL3Hx/cI4/h1+ZDXB/h1+V18UO
- TLSH T103A67C12B2E441A9D06AC035CF528635DBB27C554BF0D6DF2285B2992F73BD07B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_f773e5127ba5f90a422e0ce136e3ae75_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 9.4MB
- SHA256 d07898cc1801fee211c6cbd763f86ff688139ebf5f9ceeac0fc876afeea9a062
- MD5 f773e5127ba5f90a422e0ce136e3ae75
- SHA1 e5750eb1901b23c74739488306a1a4c45b1d3e4f
- SHA512 37beaa3ceb1bc938c3325d0238e5739c106b5181560626403b5728ca3191c931195e04a198b91b850144e5afb0c4fc61c9dbb69ebb5023f4c53474183cd59958
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7KLapI4/h1+Z/nbXaPO/h1+VnUm8UO:Ji8kL3Hx/cI4/h1+ZDXB/h1+V18UO
- TLSH T103A67C12B2E441A9D06AC035CF528635DBB27C554BF0D6DF2285B2992F73BD07B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry