General
- Target 2026-09-16_98316b2bc5817affc63e72c0752096ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 8.0MB
- Sample260916-mlzersts8k
- SHA256 c5d3687fb18445d18279dd92dd4dd36f000a9e33516d11b5a611b13af2b943e5
- MD5 98316b2bc5817affc63e72c0752096ce
- SHA1 a57cd2dd66d1f112bf8acf261a39bbd42e104f49
- SHA512 28900269198bcabc15ce58c1488761624e2a25eeb4aaa02571efe3e06cd408036dfaf3177397710c92290c38b52204fba250116664a270abd7d5667a136bd5d0
- SSDEEP 98304:5GUgTH2M2m9UMpu1QfLczqssnKSSdEu4kRAuFkkmC:5pgTH2qBpu1QfLIqsufSdExuFXmC
- TLSH T1CE86072162D58FECC05FA470CE4669A569237C458F619FDF19807E293E366F0AE3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_98316b2bc5817affc63e72c0752096ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_98316b2bc5817affc63e72c0752096ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_98316b2bc5817affc63e72c0752096ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 8.0MB
- SHA256 c5d3687fb18445d18279dd92dd4dd36f000a9e33516d11b5a611b13af2b943e5
- MD5 98316b2bc5817affc63e72c0752096ce
- SHA1 a57cd2dd66d1f112bf8acf261a39bbd42e104f49
- SHA512 28900269198bcabc15ce58c1488761624e2a25eeb4aaa02571efe3e06cd408036dfaf3177397710c92290c38b52204fba250116664a270abd7d5667a136bd5d0
- SSDEEP 98304:5GUgTH2M2m9UMpu1QfLczqssnKSSdEu4kRAuFkkmC:5pgTH2qBpu1QfLIqsufSdExuFXmC
- TLSH T1CE86072162D58FECC05FA470CE4669A569237C458F619FDF19807E293E366F0AE3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application