General

  • Target
    2026-09-11_3afc1a792882caec7d68575a176e2d4e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
  • Size 9.6MB
  • Sample260912-nc84aafp8v
  • SHA256 ff8f50432b7de7e92967e81a296436e4b440ea731818886d2dac85f4f9e81f85
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-09-11_3afc1a792882caec7d68575a176e2d4e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
    • Size 9.6MB
    • SHA256 ff8f50432b7de7e92967e81a296436e4b440ea731818886d2dac85f4f9e81f85
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables packed with ASPack

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks