General
- Target 2026-09-09_04bafe34fc59dda8df121873347be393_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- Sample260910-a9ph9avxhs
- SHA256 e2972e67871579166b330f4cabd2972c426465963e2ee5870951044d6e8509a7
- MD5 04bafe34fc59dda8df121873347be393
- SHA1 ef90d02eabb4eb944fc9d5919ea1741da0e6b793
- SHA512 2cc80a4c85f2f89f6338d279dd2eb46f5ccf0f339ded888d3630b12fd7dd8c810a5767f6e4a074010e888c44e324c2f3af017aa15f8ed35a9f904a6d5422b269
- SSDEEP 49152:MtFU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpW:MtFUgTH2M2m9UMpu1QfLczqssnKS0
- TLSH T19A56B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-09_04bafe34fc59dda8df121873347be393_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_04bafe34fc59dda8df121873347be393_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_04bafe34fc59dda8df121873347be393_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- SHA256 e2972e67871579166b330f4cabd2972c426465963e2ee5870951044d6e8509a7
- MD5 04bafe34fc59dda8df121873347be393
- SHA1 ef90d02eabb4eb944fc9d5919ea1741da0e6b793
- SHA512 2cc80a4c85f2f89f6338d279dd2eb46f5ccf0f339ded888d3630b12fd7dd8c810a5767f6e4a074010e888c44e324c2f3af017aa15f8ed35a9f904a6d5422b269
- SSDEEP 49152:MtFU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpW:MtFUgTH2M2m9UMpu1QfLczqssnKS0
- TLSH T19A56B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables packed with ASPack
Executes dropped EXE
Adds Run key to start application