General
- Target 2026-09-07_d365c6bc67f3826e3f40cd4664f9ea80_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.0MB
- Sample260908-fpaggssbpd
- SHA256 21b59631486875ca3851d65367b37dc4f2eda078ecbce385d743be3488ef9dbb
- MD5 d365c6bc67f3826e3f40cd4664f9ea80
- SHA1 8201f0e66a378aa411368dba611d3fe45bf51641
- SHA512 5ee78765ebae514fde8d0e886e2612f5a5aefa61ad0ca9c44a073ea2dbc133462b9b697137175c7d5170372c2578aa6b24e2ac288728b57d9a439adc9cb368d4
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+CoezSC6v2XMHG/h1+2:Qi8kL3Hxz7/h1+C/L/h1+2
- TLSH T1C1866D16F6A442A6D077D175C5A39A76EA727C460730CACF2289F71D2F337D09A36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_d365c6bc67f3826e3f40cd4664f9ea80_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_d365c6bc67f3826e3f40cd4664f9ea80_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_d365c6bc67f3826e3f40cd4664f9ea80_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 8.0MB
- SHA256 21b59631486875ca3851d65367b37dc4f2eda078ecbce385d743be3488ef9dbb
- MD5 d365c6bc67f3826e3f40cd4664f9ea80
- SHA1 8201f0e66a378aa411368dba611d3fe45bf51641
- SHA512 5ee78765ebae514fde8d0e886e2612f5a5aefa61ad0ca9c44a073ea2dbc133462b9b697137175c7d5170372c2578aa6b24e2ac288728b57d9a439adc9cb368d4
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+CoezSC6v2XMHG/h1+2:Qi8kL3Hxz7/h1+C/L/h1+2
- TLSH T1C1866D16F6A442A6D077D175C5A39A76EA727C460730CACF2289F71D2F337D09A36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry