General
- Target 2026-09-12_4d28a46eb31f569fc48c1317f1c9f1f5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.8MB
- Sample260913-cma4fsstaz
- SHA256 0e40a98e8ee316b07dc3ce9ad5d2b51bec95e2971f5c7b73a8c421409cbdf126
- MD5 4d28a46eb31f569fc48c1317f1c9f1f5
- SHA1 e9d3f835da0adba1bd947f9e81f71a5813b677d8
- SHA512 f34051cb8d23738e9965bb8cfb5fd87e53a0eda44b978602234dac3cdbc217a9417525761c30586c7862f9b86fc1a6252c5bbe4ae219e34793d4d465289b25b9
- SSDEEP 49152:/mU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuF:/mUgTH2M2m9UMpu1QfLczqssnKS4
- TLSH T1D756B31126DA9FDCC05FA474CE0669B16A237C468F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_4d28a46eb31f569fc48c1317f1c9f1f5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_4d28a46eb31f569fc48c1317f1c9f1f5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_4d28a46eb31f569fc48c1317f1c9f1f5_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.8MB
- SHA256 0e40a98e8ee316b07dc3ce9ad5d2b51bec95e2971f5c7b73a8c421409cbdf126
- MD5 4d28a46eb31f569fc48c1317f1c9f1f5
- SHA1 e9d3f835da0adba1bd947f9e81f71a5813b677d8
- SHA512 f34051cb8d23738e9965bb8cfb5fd87e53a0eda44b978602234dac3cdbc217a9417525761c30586c7862f9b86fc1a6252c5bbe4ae219e34793d4d465289b25b9
- SSDEEP 49152:/mU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuF:/mUgTH2M2m9UMpu1QfLczqssnKS4
- TLSH T1D756B31126DA9FDCC05FA474CE0669B16A237C468F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application