General
- Target 2026-09-12_ad4dd96026faadfd120937621e14bafb_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar_wannacry
- Size 5.8MB
- Sample260912-yfap1aek6y
- SHA256 41f9435357afbc09bbe2a47896993d97d57f7733cb252b342867fdd30303700d
- MD5 ad4dd96026faadfd120937621e14bafb
- SHA1 f52c0a3ca440d59847b475a229a61f38eabcb8bc
- SHA512 28083721dd17e7339d8adfeab0d1e8e7e2dcf85bec3968437a8105ab01c48c865c5f592e7dcdbfa4c1ea5512e3d96fca42dd06aeb9db3f4ea9e72644e1c72af3
- SSDEEP 49152:/IU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuW:/IUgTH2M2m9UMpu1QfLczqssnKS1VEI
- TLSH T16F563C12669A9F9CC15FD474CA074AA16A237C864F61ABDF0180BE393F756F45F3820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_ad4dd96026faadfd120937621e14bafb_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_ad4dd96026faadfd120937621e14bafb_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_ad4dd96026faadfd120937621e14bafb_akira_cobalt-strike_elex_icedid_njrat_remcos_vidar_wannacry
- Size 5.8MB
- SHA256 41f9435357afbc09bbe2a47896993d97d57f7733cb252b342867fdd30303700d
- MD5 ad4dd96026faadfd120937621e14bafb
- SHA1 f52c0a3ca440d59847b475a229a61f38eabcb8bc
- SHA512 28083721dd17e7339d8adfeab0d1e8e7e2dcf85bec3968437a8105ab01c48c865c5f592e7dcdbfa4c1ea5512e3d96fca42dd06aeb9db3f4ea9e72644e1c72af3
- SSDEEP 49152:/IU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuW:/IUgTH2M2m9UMpu1QfLczqssnKS1VEI
- TLSH T16F563C12669A9F9CC15FD474CA074AA16A237C864F61ABDF0180BE393F756F45F3820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application