General
- Target 2026-09-13_11870fa3c69634e923deaf808c65e996_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.6MB
- Sample260913-wc29qsbl6v
- SHA256 3fe16b63d4ca1286ac5a88e7306212c176f7aadb7b9b02f95e6d0f7fcb4d5873
- MD5 11870fa3c69634e923deaf808c65e996
- SHA1 99f581ee827735ee0a7e655568850a3366b4bd44
- SHA512 5a5b3a1eecf31902ddbd23133cdae1edc7627c57d0ca24565074962a1f407169490becb78fcb82291aefb36e8e64da98f2f789ea6d2d9f0da1b78493c675cfaf
- SSDEEP 98304:50UgTH2M2m9UMpu1QfLczqssnKSSdCfkZccfkZcdoW3BdHm:5zgTH2qBpu1QfLIqsufSdcP6PdV7Hm
- TLSH T165A6081162E98FA9D06FD074CD5666A5AA333C458F209FDF0580BE293E366E09E3531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_11870fa3c69634e923deaf808c65e996_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_ic.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_11870fa3c69634e923deaf808c65e996_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_ic.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_11870fa3c69634e923deaf808c65e996_akira_amadey_cobalt-strike_darkgate_elex_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.6MB
- SHA256 3fe16b63d4ca1286ac5a88e7306212c176f7aadb7b9b02f95e6d0f7fcb4d5873
- MD5 11870fa3c69634e923deaf808c65e996
- SHA1 99f581ee827735ee0a7e655568850a3366b4bd44
- SHA512 5a5b3a1eecf31902ddbd23133cdae1edc7627c57d0ca24565074962a1f407169490becb78fcb82291aefb36e8e64da98f2f789ea6d2d9f0da1b78493c675cfaf
- SSDEEP 98304:50UgTH2M2m9UMpu1QfLczqssnKSSdCfkZccfkZcdoW3BdHm:5zgTH2qBpu1QfLIqsufSdcP6PdV7Hm
- TLSH T165A6081162E98FA9D06FD074CD5666A5AA333C458F209FDF0580BE293E366E09E3531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application