General
- Target 2026-08-23_24e3864f7176b1790013cd6d8b9a836f_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.1MB
- Sample260824-sxt73sea69
- SHA256 0c9fd32ccd48769b4f6d2cbfdd5e404e6f937bced0c425c33c7ff62cf09feb9e
- MD5 24e3864f7176b1790013cd6d8b9a836f
- SHA1 f3e2583bd36a457d79a2b934a4556f5a99ded649
- SHA512 3783f855663cb0b32b6a9a9e5c38280cd49258cc189b4d5e8a8c1fae7e3b374e7e8f1d4be9ab44b1c3ecf49f8f2d02829bdfb7e9da10b7cbaaa2857c90991dae
- SSDEEP 196608:Ji8kL3Hxw18U+i8kL3Hxw18UJ9i8kL3Hxw18U+i8kL3Hxw18UJW:FkL3RoGkL3RoFJkL3RoGkL3RoFW
- TLSH T15C378E03B6D440E9E06EC534D6659632EA72BC520B20E6CF2699F61E1F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_24e3864f7176b1790013cd6d8b9a836f_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_24e3864f7176b1790013cd6d8b9a836f_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_24e3864f7176b1790013cd6d8b9a836f_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.1MB
- SHA256 0c9fd32ccd48769b4f6d2cbfdd5e404e6f937bced0c425c33c7ff62cf09feb9e
- MD5 24e3864f7176b1790013cd6d8b9a836f
- SHA1 f3e2583bd36a457d79a2b934a4556f5a99ded649
- SHA512 3783f855663cb0b32b6a9a9e5c38280cd49258cc189b4d5e8a8c1fae7e3b374e7e8f1d4be9ab44b1c3ecf49f8f2d02829bdfb7e9da10b7cbaaa2857c90991dae
- SSDEEP 196608:Ji8kL3Hxw18U+i8kL3Hxw18UJ9i8kL3Hxw18U+i8kL3Hxw18UJW:FkL3RoGkL3RoFJkL3RoGkL3RoFW
- TLSH T15C378E03B6D440E9E06EC534D6659632EA72BC520B20E6CF2699F61E1F73BD05F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry