General
- Target 2026-09-11_47c6e2c4a4c0e41c4f8b01721abbe6a9_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 7.4MB
- Sample260912-msl31saa24
- SHA256 0da6e9dd9cdc2d6f1e12992c484553b1093496400b0619124eb216f5580727d1
- MD5 47c6e2c4a4c0e41c4f8b01721abbe6a9
- SHA1 5bdf3b4820d84c17e508ddc83f5524438ad47fe0
- SHA512 47343ad2367f687ea07b172dcb47c1dac491991c76fe88c04474db6b50f40369d19ac7e66d8a8a473718d4ce7f665e929245359a1ea7e88b612879b506ec50cb
- SSDEEP 98304:5vUgTH2M2m9UMpu1QfLczqssnKSx6g4kRAuFkkmR:58gTH2qBpu1QfLIqsufx6/uFXmR
- TLSH T1BF76F72162D68FECC05FA470CE4669A569237C458F616FDF19807E293E756F0AE3820F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-11_47c6e2c4a4c0e41c4f8b01721abbe6a9_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_47c6e2c4a4c0e41c4f8b01721abbe6a9_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_47c6e2c4a4c0e41c4f8b01721abbe6a9_akira_amadey_cobalt-strike_coinminer_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 7.4MB
- SHA256 0da6e9dd9cdc2d6f1e12992c484553b1093496400b0619124eb216f5580727d1
- MD5 47c6e2c4a4c0e41c4f8b01721abbe6a9
- SHA1 5bdf3b4820d84c17e508ddc83f5524438ad47fe0
- SHA512 47343ad2367f687ea07b172dcb47c1dac491991c76fe88c04474db6b50f40369d19ac7e66d8a8a473718d4ce7f665e929245359a1ea7e88b612879b506ec50cb
- SSDEEP 98304:5vUgTH2M2m9UMpu1QfLczqssnKSx6g4kRAuFkkmR:58gTH2qBpu1QfLIqsufx6/uFXmR
- TLSH T1BF76F72162D68FECC05FA470CE4669A569237C458F616FDF19807E293E756F0AE3820F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application