General
- Target 2026-09-12_2067ff162c67f36d3218cfe1a3f5c8c1_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 12.5MB
- Sample260913-fxdtwafd75
- SHA256 ba06d605bcb66849dcbd738f296524e0c29cdd5230d0bc5ac8a63714e9ded156
- MD5 2067ff162c67f36d3218cfe1a3f5c8c1
- SHA1 5b57dd4568e43050f2a4171d83d6023e346ec48d
- SHA512 f1476687f8e2897a351159f3f5a146f01762657cb238df7218eb90b54009d61e1c9a55a9586e4f974231f4e6e3c25e8db6dde1c8ce3d021ebd2e7643a5bfe63e
- SSDEEP 196608:5ZgTH2qBpu1QfLIqsufXdGeeGZF6bUpMBF1p/kjRm4OWi2bX:4THNBpu1Qfc0VIbUwF1VERmj2bX
- TLSH T130D68D1165DA9FDCC05FA474CE0665B16A237C468F21AFDF09807E293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_2067ff162c67f36d3218cfe1a3f5c8c1_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_l.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_2067ff162c67f36d3218cfe1a3f5c8c1_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_l.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_2067ff162c67f36d3218cfe1a3f5c8c1_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 12.5MB
- SHA256 ba06d605bcb66849dcbd738f296524e0c29cdd5230d0bc5ac8a63714e9ded156
- MD5 2067ff162c67f36d3218cfe1a3f5c8c1
- SHA1 5b57dd4568e43050f2a4171d83d6023e346ec48d
- SHA512 f1476687f8e2897a351159f3f5a146f01762657cb238df7218eb90b54009d61e1c9a55a9586e4f974231f4e6e3c25e8db6dde1c8ce3d021ebd2e7643a5bfe63e
- SSDEEP 196608:5ZgTH2qBpu1QfLIqsufXdGeeGZF6bUpMBF1p/kjRm4OWi2bX:4THNBpu1Qfc0VIbUwF1VERmj2bX
- TLSH T130D68D1165DA9FDCC05FA474CE0665B16A237C468F21AFDF09807E293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application