General
- Target 2026-09-10_cfbb890d177eb303802119e441b5db91_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 6.9MB
- Sample260910-mdfmpa1gke
- SHA256 d5f3bd6a4be0edb8b690604d0095140d3678209965deceeaa965da46856c3448
- MD5 cfbb890d177eb303802119e441b5db91
- SHA1 ddba4294745441111d65ebd42af6da24ce1a5151
- SHA512 00cc76eae9e35406595c5aaa921b7870a301be29b5744756243feee334aa1ea219d1a79f904434ec3e8c7bf7c0a4ce7fcb70f7eae0d76cbc75267af5bc7746cb
- SSDEEP 98304:5mKUgTH2M2m9UMpu1QfLczqssnKSsuw6a:52gTH2qBpu1QfLIqsufszd
- TLSH T12576E71162D99FDCC05FD474CE4665A56A237C468F20AFDF0980BE293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_cfbb890d177eb303802119e441b5db91_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_i.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_cfbb890d177eb303802119e441b5db91_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_i.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_cfbb890d177eb303802119e441b5db91_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 6.9MB
- SHA256 d5f3bd6a4be0edb8b690604d0095140d3678209965deceeaa965da46856c3448
- MD5 cfbb890d177eb303802119e441b5db91
- SHA1 ddba4294745441111d65ebd42af6da24ce1a5151
- SHA512 00cc76eae9e35406595c5aaa921b7870a301be29b5744756243feee334aa1ea219d1a79f904434ec3e8c7bf7c0a4ce7fcb70f7eae0d76cbc75267af5bc7746cb
- SSDEEP 98304:5mKUgTH2M2m9UMpu1QfLczqssnKSsuw6a:52gTH2qBpu1QfLIqsufszd
- TLSH T12576E71162D99FDCC05FD474CE4665A56A237C468F20AFDF0980BE293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application