General
- Target 2026-09-11_3afc1a792882caec7d68575a176e2d4e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 9.6MB
- Sample260912-nc84aafp8v
- SHA256 ff8f50432b7de7e92967e81a296436e4b440ea731818886d2dac85f4f9e81f85
- MD5 3afc1a792882caec7d68575a176e2d4e
- SHA1 a213e0920917dd6cc492b559e48843e27cb6b860
- SHA512 5e92fd27463c476f8f4e0b72ff05c0e4bd2eba175e24ff6f3198541ca7c0f63293dd6caf73eb8da19809615924d776c87d59b2bb739bb9cf32ad18070923270c
- SSDEEP 98304:ktzUgTH2M2m9UMpu1QfLczqssnKS66OfkZccui+w32+QDENms20:JgTH2qBpu1QfLIqsuf6pPcui+LjENZ
- TLSH T146A6281162D98FADC05FE034CE4676A5AA337C458F219FDF09847E293E766A05E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-11_3afc1a792882caec7d68575a176e2d4e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipam.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_3afc1a792882caec7d68575a176e2d4e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipam.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_3afc1a792882caec7d68575a176e2d4e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 9.6MB
- SHA256 ff8f50432b7de7e92967e81a296436e4b440ea731818886d2dac85f4f9e81f85
- MD5 3afc1a792882caec7d68575a176e2d4e
- SHA1 a213e0920917dd6cc492b559e48843e27cb6b860
- SHA512 5e92fd27463c476f8f4e0b72ff05c0e4bd2eba175e24ff6f3198541ca7c0f63293dd6caf73eb8da19809615924d776c87d59b2bb739bb9cf32ad18070923270c
- SSDEEP 98304:ktzUgTH2M2m9UMpu1QfLczqssnKS66OfkZccui+w32+QDENms20:JgTH2qBpu1QfLIqsuf6pPcui+LjENZ
- TLSH T146A6281162D98FADC05FE034CE4676A5AA337C458F219FDF09847E293E766A05E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application