General
- Target 2026-08-23_4e080f7555b152ce6232a4bba025520c_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.1MB
- Sample260824-pc26easzgw
- SHA256 ffb6fe187101ac789bbc8f4bec2e386ba10358d12dda65144ee883d9f60e3c67
- MD5 4e080f7555b152ce6232a4bba025520c
- SHA1 b0e55a56e41710796ec51c7ba6ada2938089cc73
- SHA512 5c3fc465c29c78b6491bc8bd13fde1beebb79750884c77e248d3a1b065e54b1622ce1b17bdae28fb7846486ba0c5586d6db60dce3ce985a407a73933cd6e2222
- SSDEEP 196608:Ji8kL3Hxw18U+i8kL3Hxw18UTSvyEYc/b3w8O:FkL3RoGkL3RoXSvyEYKbi
- TLSH T1B4F67E52B7E440F9E06AD134C6668572E672BC420B31EACF1695F61E2F33BD05E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_4e080f7555b152ce6232a4bba025520c_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_4e080f7555b152ce6232a4bba025520c_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_4e080f7555b152ce6232a4bba025520c_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.1MB
- SHA256 ffb6fe187101ac789bbc8f4bec2e386ba10358d12dda65144ee883d9f60e3c67
- MD5 4e080f7555b152ce6232a4bba025520c
- SHA1 b0e55a56e41710796ec51c7ba6ada2938089cc73
- SHA512 5c3fc465c29c78b6491bc8bd13fde1beebb79750884c77e248d3a1b065e54b1622ce1b17bdae28fb7846486ba0c5586d6db60dce3ce985a407a73933cd6e2222
- SSDEEP 196608:Ji8kL3Hxw18U+i8kL3Hxw18UTSvyEYc/b3w8O:FkL3RoGkL3RoXSvyEYKbi
- TLSH T1B4F67E52B7E440F9E06AD134C6668572E672BC420B31EACF1695F61E2F33BD05E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry