General
- Target 2026-09-09_eee60ee710a8bfdd9460462431c18f7e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.3MB
- Sample260910-1skf3shl4w
- SHA256 319c638d178471322ea53eca8c30eb19e3d728c27c511a716603e46edc227c84
- MD5 eee60ee710a8bfdd9460462431c18f7e
- SHA1 83bf6aeb93cada5bec3b0bfae3605d1c081dfa96
- SHA512 8c800b9de1aeb09b6576a0473bfd279aed3bef1183141a12ada6549de00e8a6a795abe27370e14d9955c59ffe6a201008973196bc1bd03ac5a4aaf2c81eb11c3
- SSDEEP 49152:/kU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuA:/kUgTH2M2m9UMpu1QfLczqssnKScc
- TLSH T13166C41161DADFDCC05FA474CE066AF16A237C468F61AFDB19807E293E756A06E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_eee60ee710a8bfdd9460462431c18f7e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_eee60ee710a8bfdd9460462431c18f7e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_eee60ee710a8bfdd9460462431c18f7e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.3MB
- SHA256 319c638d178471322ea53eca8c30eb19e3d728c27c511a716603e46edc227c84
- MD5 eee60ee710a8bfdd9460462431c18f7e
- SHA1 83bf6aeb93cada5bec3b0bfae3605d1c081dfa96
- SHA512 8c800b9de1aeb09b6576a0473bfd279aed3bef1183141a12ada6549de00e8a6a795abe27370e14d9955c59ffe6a201008973196bc1bd03ac5a4aaf2c81eb11c3
- SSDEEP 49152:/kU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuA:/kUgTH2M2m9UMpu1QfLczqssnKScc
- TLSH T13166C41161DADFDCC05FA474CE066AF16A237C468F61AFDB19807E293E756A06E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application