General
- Target 2026-09-12_4ffdcb1bd28bfaab095df131dff7a0d3_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 7.2MB
- Sample260913-ceagysbj4v
- SHA256 55254a38b4534a2f91fffdd8e1fd90447ac71ca908ba30b606bd44ca21cbe098
- MD5 4ffdcb1bd28bfaab095df131dff7a0d3
- SHA1 c1cfa0b052f16cc21a1a02fd3db83feaa886712e
- SHA512 718ad41983f18caa71d704044ee99f9698eaaa539490d9ea51c1dd67985c224653f1777813f835a43f989221e171309bef032858aa540b1a8b4b2109fc22c662
- SSDEEP 49152:/6U8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpu5:/6UgTH2M2m9UMpu1QfLczqssnKSziifQ
- TLSH T1C776E51166D69FDCD09FA474CE4A65A56A237C818F20AFDF09807E293E756F06E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_4ffdcb1bd28bfaab095df131dff7a0d3_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_4ffdcb1bd28bfaab095df131dff7a0d3_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_4ffdcb1bd28bfaab095df131dff7a0d3_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 7.2MB
- SHA256 55254a38b4534a2f91fffdd8e1fd90447ac71ca908ba30b606bd44ca21cbe098
- MD5 4ffdcb1bd28bfaab095df131dff7a0d3
- SHA1 c1cfa0b052f16cc21a1a02fd3db83feaa886712e
- SHA512 718ad41983f18caa71d704044ee99f9698eaaa539490d9ea51c1dd67985c224653f1777813f835a43f989221e171309bef032858aa540b1a8b4b2109fc22c662
- SSDEEP 49152:/6U8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpu5:/6UgTH2M2m9UMpu1QfLczqssnKSziifQ
- TLSH T1C776E51166D69FDCD09FA474CE4A65A56A237C818F20AFDF09807E293E756F06E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application