General
- Target 2026-09-12_321f4d651a79faffe922d7c20ba72bd7_akira_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 8.7MB
- Sample260913-ehqz8a1elf
- SHA256 94ef66f88a434284319f51046e5f54d112af33e13e557f8e678d578843007926
- MD5 321f4d651a79faffe922d7c20ba72bd7
- SHA1 07aa796d4fafa897b5609c421502aca6164f1207
- SHA512 dc6ca503d0ab6b1bc0f62d8c2dd63b31a57bd369baa9fbc54e0252d30676aa25e0ac1830cc33d90d0b3e55258d2c9b26c1105ea5fbcfdc07303759aa272ed0a1
- SSDEEP 98304:5NUgTH2M2m9UMpu1QfLczqssnKSu6Oui+w32+QDENms2E:5+gTH2qBpu1QfLIqsufubui+LjENh
- TLSH T18A96172122D99FECC05FA430CE4A75B566237C458F61AFDF19807E293E756A06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_321f4d651a79faffe922d7c20ba72bd7_akira_cobalt-strike_elex_hijackloader_icedid_luca-steale.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_321f4d651a79faffe922d7c20ba72bd7_akira_cobalt-strike_elex_hijackloader_icedid_luca-steale.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_321f4d651a79faffe922d7c20ba72bd7_akira_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 8.7MB
- SHA256 94ef66f88a434284319f51046e5f54d112af33e13e557f8e678d578843007926
- MD5 321f4d651a79faffe922d7c20ba72bd7
- SHA1 07aa796d4fafa897b5609c421502aca6164f1207
- SHA512 dc6ca503d0ab6b1bc0f62d8c2dd63b31a57bd369baa9fbc54e0252d30676aa25e0ac1830cc33d90d0b3e55258d2c9b26c1105ea5fbcfdc07303759aa272ed0a1
- SSDEEP 98304:5NUgTH2M2m9UMpu1QfLczqssnKSu6Oui+w32+QDENms2E:5+gTH2qBpu1QfLIqsufubui+LjENh
- TLSH T18A96172122D99FECC05FA430CE4A75B566237C458F61AFDF19807E293E756A06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application