General
- Target 2026-09-10_a767bbec778fcdffbd46b57fc0a41b36_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_tofsee_vidar
- Size 6.3MB
- Sample260910-pmta9ashma
- SHA256 9de802f461520b0c369c45372975bbc81609e152242b0458a360ba8ccffd68f7
- MD5 a767bbec778fcdffbd46b57fc0a41b36
- SHA1 92b9c73162c999736c0e7569accf3f8d2e1206bd
- SHA512 2cc4b30c38ef47056faa5b22d254a10c2940f110291b1fc7734e0d1b61ba6a83286f63b0bbd364bcd7c3aa3a260d51c67a4eaaff3b8ce830f14ab356bd735276
- SSDEEP 49152:5EU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpus:5EUgTH2M2m9UMpu1QfLczqssnKSXE/Ry
- TLSH T1AD66C51161DA9FDCC05FE474CE0669A16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_a767bbec778fcdffbd46b57fc0a41b36_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remco.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_a767bbec778fcdffbd46b57fc0a41b36_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remco.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_a767bbec778fcdffbd46b57fc0a41b36_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_tofsee_vidar
- Size 6.3MB
- SHA256 9de802f461520b0c369c45372975bbc81609e152242b0458a360ba8ccffd68f7
- MD5 a767bbec778fcdffbd46b57fc0a41b36
- SHA1 92b9c73162c999736c0e7569accf3f8d2e1206bd
- SHA512 2cc4b30c38ef47056faa5b22d254a10c2940f110291b1fc7734e0d1b61ba6a83286f63b0bbd364bcd7c3aa3a260d51c67a4eaaff3b8ce830f14ab356bd735276
- SSDEEP 49152:5EU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpus:5EUgTH2M2m9UMpu1QfLczqssnKSXE/Ry
- TLSH T1AD66C51161DA9FDCC05FE474CE0669A16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application