General
- Target 2026-09-10_70bc24249bf1ef7d16c8425771269f28_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar
- Size 8.2MB
- Sample260910-swvgfs1hjb
- SHA256 cbfe5f0bb696d7b991ed5de2e5778287927a233a4dff9ad38794e7ec5b1ca2df
- MD5 70bc24249bf1ef7d16c8425771269f28
- SHA1 283fab3367cc4626a862150db1c91c40fa57210a
- SHA512 06bed9dbd7b12f5446df231645177169484d83e7a60b94c0680e60598049805870795faca7f784f703fe82ad40488cb3ca387130359597cd97b9ec3b5999b2b9
- SSDEEP 98304:/NUgTH2M2m9UMpu1QfLczqssnKSSui+w32+QDENms26:/+gTH2qBpu1QfLIqsufSui+LjENj
- TLSH T163864A12729A9F6CC05FE430CE4A56A56A337C468F61ABDF01847E293E766F05F38217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_70bc24249bf1ef7d16c8425771269f28_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_70bc24249bf1ef7d16c8425771269f28_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_70bc24249bf1ef7d16c8425771269f28_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar
- Size 8.2MB
- SHA256 cbfe5f0bb696d7b991ed5de2e5778287927a233a4dff9ad38794e7ec5b1ca2df
- MD5 70bc24249bf1ef7d16c8425771269f28
- SHA1 283fab3367cc4626a862150db1c91c40fa57210a
- SHA512 06bed9dbd7b12f5446df231645177169484d83e7a60b94c0680e60598049805870795faca7f784f703fe82ad40488cb3ca387130359597cd97b9ec3b5999b2b9
- SSDEEP 98304:/NUgTH2M2m9UMpu1QfLczqssnKSSui+w32+QDENms26:/+gTH2qBpu1QfLIqsufSui+LjENj
- TLSH T163864A12729A9F6CC05FE430CE4A56A56A337C468F61ABDF01847E293E766F05F38217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application