General
- Target 2026-08-23_972580b69e113e5f2a156f18d6b8eb6e_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 6.6MB
- Sample260825-28c8dabb57
- SHA256 e85bc06dbe9e3c00e1868d4eb907206dd0d61c0ba2301b12c52b5b909c200c5b
- MD5 972580b69e113e5f2a156f18d6b8eb6e
- SHA1 a326a447c23fd7c22b939b32dac3df2dc5bf28a8
- SHA512 7ce49b806199e4f7ef5fad8e3c26534c85b82fdab9ca727fe1f6b56221ac3ba4f70ff26aa4836c6d525f8d0ae6346137046e7c85c0ba1dfef9aaa8eaedae9082
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7pC/h1+mLapI9:Ji8kL3HxiC/h1+mcI9
- TLSH T1C1667C12B2E100A9D06A8131CF569631D7B27C564BF1C7DF7249B2DA2F72BC07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_972580b69e113e5f2a156f18d6b8eb6e_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_972580b69e113e5f2a156f18d6b8eb6e_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_972580b69e113e5f2a156f18d6b8eb6e_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 6.6MB
- SHA256 e85bc06dbe9e3c00e1868d4eb907206dd0d61c0ba2301b12c52b5b909c200c5b
- MD5 972580b69e113e5f2a156f18d6b8eb6e
- SHA1 a326a447c23fd7c22b939b32dac3df2dc5bf28a8
- SHA512 7ce49b806199e4f7ef5fad8e3c26534c85b82fdab9ca727fe1f6b56221ac3ba4f70ff26aa4836c6d525f8d0ae6346137046e7c85c0ba1dfef9aaa8eaedae9082
- SSDEEP 98304:Su5x6M1WoDDklJ6qqUHxqPF7pC/h1+mLapI9:Ji8kL3HxiC/h1+mcI9
- TLSH T1C1667C12B2E100A9D06A8131CF569631D7B27C564BF1C7DF7249B2DA2F72BC07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry