General
- Target 2026-09-16_2385d6a5379c50a04e3f44d68003c2a4_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_tofsee_vidar
- Size 5.9MB
- Sample260916-q49v1a1elf
- SHA256 26aeeab52ac1f553a7ad657d72dd11fe907647fe26efd6ff6c2b0ae888b9df64
- MD5 2385d6a5379c50a04e3f44d68003c2a4
- SHA1 2416bd2573b6c5be8008238345ceb98f064ce545
- SHA512 06c70e0c918fa60393af20dba9074e4659c223610e4b357b0cf1fd64772f0a86dac48c4872825afe57b96bcdb443193e03c34405c9e231b1b1c2e961fa635022
- SSDEEP 49152:/EU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpux:/EUgTH2M2m9UMpu1QfLczqssnKSN/RG
- TLSH T17956B41125DA9FDCC05FA474CE0669B16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_2385d6a5379c50a04e3f44d68003c2a4_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remco.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_2385d6a5379c50a04e3f44d68003c2a4_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remco.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_2385d6a5379c50a04e3f44d68003c2a4_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_tofsee_vidar
- Size 5.9MB
- SHA256 26aeeab52ac1f553a7ad657d72dd11fe907647fe26efd6ff6c2b0ae888b9df64
- MD5 2385d6a5379c50a04e3f44d68003c2a4
- SHA1 2416bd2573b6c5be8008238345ceb98f064ce545
- SHA512 06c70e0c918fa60393af20dba9074e4659c223610e4b357b0cf1fd64772f0a86dac48c4872825afe57b96bcdb443193e03c34405c9e231b1b1c2e961fa635022
- SSDEEP 49152:/EU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpux:/EUgTH2M2m9UMpu1QfLczqssnKSN/RG
- TLSH T17956B41125DA9FDCC05FA474CE0669B16A237C468F61AFDF1980BE293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application