General
- Target 2026-09-12_e18be8fedbd0cd90d6e30b6aa8138735_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 6.0MB
- Sample260913-zagf2adn6v
- SHA256 2ca314ad0666bbccbf004328ee7e941c2bd12f3cea5b0ce88115436ac38264dc
- MD5 e18be8fedbd0cd90d6e30b6aa8138735
- SHA1 fb526d0a7673a0f27187f9a411014e91760c6532
- SHA512 e89acddc1851043a6d28e697d418ea902f2cdc2ec4bae0145fc92fdd63b6dfcee6248e31646154416e9a2716d7ec29ea0ea3224c6d24ede70f5af7f7b5aabb60
- SSDEEP 49152:5AU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuU:5AUgTH2M2m9UMpu1QfLczqssnKSLjmNs
- TLSH T13E56C41125DA9FDCC05FA474CE0669B16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_e18be8fedbd0cd90d6e30b6aa8138735_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_e18be8fedbd0cd90d6e30b6aa8138735_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e18be8fedbd0cd90d6e30b6aa8138735_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 6.0MB
- SHA256 2ca314ad0666bbccbf004328ee7e941c2bd12f3cea5b0ce88115436ac38264dc
- MD5 e18be8fedbd0cd90d6e30b6aa8138735
- SHA1 fb526d0a7673a0f27187f9a411014e91760c6532
- SHA512 e89acddc1851043a6d28e697d418ea902f2cdc2ec4bae0145fc92fdd63b6dfcee6248e31646154416e9a2716d7ec29ea0ea3224c6d24ede70f5af7f7b5aabb60
- SSDEEP 49152:5AU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuU:5AUgTH2M2m9UMpu1QfLczqssnKSLjmNs
- TLSH T13E56C41125DA9FDCC05FA474CE0669B16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application