General
- Target 2026-09-10_f21f0792fdb512a56901f5dda65904e0_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 6.0MB
- Sample260910-ktkv8s1aph
- SHA256 b817381e3ec0210d5deb1d3e85ba3233ac9cf215ec35c65f8cb5ebfcdca1ac5f
- MD5 f21f0792fdb512a56901f5dda65904e0
- SHA1 090cdc71026d11aac8f6308b6775d4948f2aaa7a
- SHA512 ecae7d994e8fe5e72eecf1086aa893947b1b8273f14288a3e7f3a24f8989aa1e63052c2f3b94e3298fe1f6e11d0241471fc00fe9709663839ed5b013bec825b1
- SSDEEP 49152:OPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPB0:wKUgTH2M2m9UMpu1QfLczqssnKSsP0eK
- TLSH T15556C61165DA9FDCC05FA474CE0669A16A237C468F61AFDF09807E293E756B06F3820F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_f21f0792fdb512a56901f5dda65904e0_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_f21f0792fdb512a56901f5dda65904e0_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_f21f0792fdb512a56901f5dda65904e0_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 6.0MB
- SHA256 b817381e3ec0210d5deb1d3e85ba3233ac9cf215ec35c65f8cb5ebfcdca1ac5f
- MD5 f21f0792fdb512a56901f5dda65904e0
- SHA1 090cdc71026d11aac8f6308b6775d4948f2aaa7a
- SHA512 ecae7d994e8fe5e72eecf1086aa893947b1b8273f14288a3e7f3a24f8989aa1e63052c2f3b94e3298fe1f6e11d0241471fc00fe9709663839ed5b013bec825b1
- SSDEEP 49152:OPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPB0:wKUgTH2M2m9UMpu1QfLczqssnKSsP0eK
- TLSH T15556C61165DA9FDCC05FA474CE0669A16A237C468F61AFDF09807E293E756B06F3820F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application