General
- Target 2026-09-12_458ab486aadf663c5f8693522d0ff271_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.5MB
- Sample260913-c6j6gaea85
- SHA256 6c6e9e5682f6655e06b6f9c7beb8ee3dbfafedb09f7da65bb434a9ca3f7e8770
- MD5 458ab486aadf663c5f8693522d0ff271
- SHA1 a16e67b8225e3ce97ccd4bb08edfac46622d2b5a
- SHA512 6ec105068fdce53913124c4e0adc1e8e594400d1057c4c4468803be92fe3ee54fd8ae69177d151f9e013db562611504866759e34a6f265a3a5930409148d42f2
- SSDEEP 98304:5fKUgTH2M2m9UMpu1QfLczqssnKSJfkZck6Fui+w32+QDENms2m:59gTH2qBpu1QfLIqsufVPkwui+LjENn
- TLSH T193A6281162D98FADC05FE034CE4A76A56A237C458F219FDF09847E293E766A05F3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_458ab486aadf663c5f8693522d0ff271_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_458ab486aadf663c5f8693522d0ff271_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_458ab486aadf663c5f8693522d0ff271_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.5MB
- SHA256 6c6e9e5682f6655e06b6f9c7beb8ee3dbfafedb09f7da65bb434a9ca3f7e8770
- MD5 458ab486aadf663c5f8693522d0ff271
- SHA1 a16e67b8225e3ce97ccd4bb08edfac46622d2b5a
- SHA512 6ec105068fdce53913124c4e0adc1e8e594400d1057c4c4468803be92fe3ee54fd8ae69177d151f9e013db562611504866759e34a6f265a3a5930409148d42f2
- SSDEEP 98304:5fKUgTH2M2m9UMpu1QfLczqssnKSJfkZck6Fui+w32+QDENms2m:59gTH2qBpu1QfLIqsufVPkwui+LjENn
- TLSH T193A6281162D98FADC05FE034CE4A76A56A237C458F219FDF09847E293E766A05F3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application