General
- Target 2026-09-16_1a5bfa02144909e60e9841467b420c9a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.2MB
- Sample260916-rce2zsbc44
- SHA256 52586dcd7f753e1a59879be323bd56a9271686a05f66608bd0620d0951f586e9
- MD5 1a5bfa02144909e60e9841467b420c9a
- SHA1 80fc1ef299c463a06f103131c19d5233bf342f89
- SHA512 e690ab7f111057dfe05bee3e27d3ceb2d349386b3f0e4cd6b9bb91c76f325661ab0a7404bc107860d7a1fc0b142f4d73cdc25445eabff9efe94bed9f59659bae
- SSDEEP 98304:5UUgTH2M2m9UMpu1QfLczqssnKSSdEC04Ot:5TgTH2qBpu1QfLIqsufSdEC04e
- TLSH T16376E61165E9CFDCC05FD474CE4669A1AA237C458F20AFDF19807E293E766A06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_1a5bfa02144909e60e9841467b420c9a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_1a5bfa02144909e60e9841467b420c9a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_1a5bfa02144909e60e9841467b420c9a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.2MB
- SHA256 52586dcd7f753e1a59879be323bd56a9271686a05f66608bd0620d0951f586e9
- MD5 1a5bfa02144909e60e9841467b420c9a
- SHA1 80fc1ef299c463a06f103131c19d5233bf342f89
- SHA512 e690ab7f111057dfe05bee3e27d3ceb2d349386b3f0e4cd6b9bb91c76f325661ab0a7404bc107860d7a1fc0b142f4d73cdc25445eabff9efe94bed9f59659bae
- SSDEEP 98304:5UUgTH2M2m9UMpu1QfLczqssnKSSdEC04Ot:5TgTH2qBpu1QfLIqsufSdEC04e
- TLSH T16376E61165E9CFDCC05FD474CE4669A1AA237C458F20AFDF19807E293E766A06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application