General
- Target 2026-09-10_36eae7a97c33aa9d2bd324a5aca173cb_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_tofsee_vidar_wannacry
- Size 7.6MB
- Sample260910-wsn22swwbz
- SHA256 b3f0143d8b996f2f6f6b93135a9274e8c56d70b496c14265cd04a512c149b3e8
- MD5 36eae7a97c33aa9d2bd324a5aca173cb
- SHA1 a13f4ec5714ea7235089ac8aa1eeee8538569919
- SHA512 2cb6cdce7a122cade59607fbe3aa2898f56fe4dee6967005001dae18d39563c0e3a20717db5e5b9c9f6c8551aefa5becd6e5e81fb8db7cf17ec1b6eb6b4aaeff
- SSDEEP 98304:59UgTH2M2m9UMpu1QfLczqssnKSnqfkZch6Q/RR:5OgTH2qBpu1QfLIqsufkPh6QH
- TLSH T1D086E71161E98FD9C06FD474CE466AA5AA237C458F209FDF0980BE293E766F05E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_36eae7a97c33aa9d2bd324a5aca173cb_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_36eae7a97c33aa9d2bd324a5aca173cb_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_36eae7a97c33aa9d2bd324a5aca173cb_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_tofsee_vidar_wannacry
- Size 7.6MB
- SHA256 b3f0143d8b996f2f6f6b93135a9274e8c56d70b496c14265cd04a512c149b3e8
- MD5 36eae7a97c33aa9d2bd324a5aca173cb
- SHA1 a13f4ec5714ea7235089ac8aa1eeee8538569919
- SHA512 2cb6cdce7a122cade59607fbe3aa2898f56fe4dee6967005001dae18d39563c0e3a20717db5e5b9c9f6c8551aefa5becd6e5e81fb8db7cf17ec1b6eb6b4aaeff
- SSDEEP 98304:59UgTH2M2m9UMpu1QfLczqssnKSnqfkZch6Q/RR:5OgTH2qBpu1QfLIqsufkPh6QH
- TLSH T1D086E71161E98FD9C06FD474CE466AA5AA237C458F209FDF0980BE293E766F05E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application