General
- Target 2026-09-13_1f37a77eebb477fb015b8f35a44cda7d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 7.5MB
- Sample260913-vrprhssyhs
- SHA256 78fe0b837e3973e08cc0f03251c0990a06c869704c8d861d54427eb155331e14
- MD5 1f37a77eebb477fb015b8f35a44cda7d
- SHA1 a8fc52feb11477a989fbb9ed89123c15a4dab701
- SHA512 67a65d51afa020cb0c0b6b8950fd106e4692b8ee5e153763d715546db217eae0fc1f248aa8193a99fa26ccd6dadc68bb39251957ae5aaf230a5875ef80e9e5c7
- SSDEEP 98304:5TUgTH2M2m9UMpu1QfLczqssnKSSdEns+wE9XD8VBl:5ogTH2qBpu1QfLIqsufSdEnV9z8N
- TLSH T1C586081162D99FECC05FD474CE4665A1AA237C458F21AFDF09807E293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_1f37a77eebb477fb015b8f35a44cda7d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_1f37a77eebb477fb015b8f35a44cda7d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_1f37a77eebb477fb015b8f35a44cda7d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 7.5MB
- SHA256 78fe0b837e3973e08cc0f03251c0990a06c869704c8d861d54427eb155331e14
- MD5 1f37a77eebb477fb015b8f35a44cda7d
- SHA1 a8fc52feb11477a989fbb9ed89123c15a4dab701
- SHA512 67a65d51afa020cb0c0b6b8950fd106e4692b8ee5e153763d715546db217eae0fc1f248aa8193a99fa26ccd6dadc68bb39251957ae5aaf230a5875ef80e9e5c7
- SSDEEP 98304:5TUgTH2M2m9UMpu1QfLczqssnKSSdEns+wE9XD8VBl:5ogTH2qBpu1QfLIqsufSdEnV9z8N
- TLSH T1C586081162D99FECC05FD474CE4665A1AA237C458F21AFDF09807E293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application