General
- Target 2026-09-12_69a9d4fc685f016a2f849c9f18bc291f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 6.0MB
- Sample260913-ae41fshp2t
- SHA256 c107722ce3d02d2d792591b3dac1c9257e3e880ba88eaf42385e222347e9c363
- MD5 69a9d4fc685f016a2f849c9f18bc291f
- SHA1 e2b9cd2a0bd9c9360e0e39aa71c9c0f3fbec52f0
- SHA512 980da2d34927e2fa60fe423425795c8c35513c06e662a8da7ec47f79c5d1ac02652f75029a5cce57408ec673aacc3613c54e99ccf7cbf75c4fbd3867a43e5c76
- SSDEEP 49152:/UU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpui:/UUgTH2M2m9UMpu1QfLczqssnKSXjmNA
- TLSH T1BC56C41125DA9FDCC05FA474CE0669B16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_69a9d4fc685f016a2f849c9f18bc291f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_69a9d4fc685f016a2f849c9f18bc291f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_69a9d4fc685f016a2f849c9f18bc291f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 6.0MB
- SHA256 c107722ce3d02d2d792591b3dac1c9257e3e880ba88eaf42385e222347e9c363
- MD5 69a9d4fc685f016a2f849c9f18bc291f
- SHA1 e2b9cd2a0bd9c9360e0e39aa71c9c0f3fbec52f0
- SHA512 980da2d34927e2fa60fe423425795c8c35513c06e662a8da7ec47f79c5d1ac02652f75029a5cce57408ec673aacc3613c54e99ccf7cbf75c4fbd3867a43e5c76
- SSDEEP 49152:/UU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpui:/UUgTH2M2m9UMpu1QfLczqssnKSXjmNA
- TLSH T1BC56C41125DA9FDCC05FA474CE0669B16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application