General
- Target 2026-09-12_0aac272a469153f99e4f334f90dbac13_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_stop_vidar_wannacry
- Size 8.2MB
- Sample260913-hly2savygs
- SHA256 f9ba6c9048382bdcf35f307a03ffccb5e230da4933a5b29dacc34f90d990295e
- MD5 0aac272a469153f99e4f334f90dbac13
- SHA1 3947ab7ad76bd07c56dff14431953621aed85421
- SHA512 1dc51ed231be76cd60f91adc336ec18db06916b27b0164327480c6826d2c648df28c071a98311b00341ab23886e769568ee7b123a52352fca4f4186638a56d36
- SSDEEP 98304:BKUgTH2M2m9UMpu1QfLczqssnKSF6ndq6ldY3BdH7:ngTH2qBpu1QfLIqsufFKdq6ldY7H7
- TLSH T1B586181162D98FECD06FE474CE5665A1AA237C458F209FDF09807E293E766A06E3431F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-12_0aac272a469153f99e4f334f90dbac13_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_ic.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_0aac272a469153f99e4f334f90dbac13_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_ic.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_0aac272a469153f99e4f334f90dbac13_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_stop_vidar_wannacry
- Size 8.2MB
- SHA256 f9ba6c9048382bdcf35f307a03ffccb5e230da4933a5b29dacc34f90d990295e
- MD5 0aac272a469153f99e4f334f90dbac13
- SHA1 3947ab7ad76bd07c56dff14431953621aed85421
- SHA512 1dc51ed231be76cd60f91adc336ec18db06916b27b0164327480c6826d2c648df28c071a98311b00341ab23886e769568ee7b123a52352fca4f4186638a56d36
- SSDEEP 98304:BKUgTH2M2m9UMpu1QfLczqssnKSF6ndq6ldY3BdH7:ngTH2qBpu1QfLIqsufFKdq6ldY7H7
- TLSH T1B586181162D98FECD06FE474CE5665A1AA237C458F209FDF09807E293E766A06E3431F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application