General
- Target 2026-09-16_110c8a4c27b5f3dbcd31b31b760bdc74_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 7.5MB
- Sample260916-rmgcss1frb
- SHA256 a03f2fd0a37aee235279c769057de426e8c5cd6baa5ab7dd3843a8cc3971d452
- MD5 110c8a4c27b5f3dbcd31b31b760bdc74
- SHA1 adcb0ce5b6c3cf888cd612d9f29440e5e3415def
- SHA512 4a570a0843958d76ce1fe54c02bdf175845263e5f85cffbb71c08fc8c9afd04bf27655e13e7f3dfc73d3d6aabfc53904cd727585e431146d7e5552f6b4d2092f
- SSDEEP 98304:5uUgTH2M2m9UMpu1QfLczqssnKSSdEns+wE9XD8VBI:5xgTH2qBpu1QfLIqsufSdEnV9z8w
- TLSH T1A986081162D99FECC05FD474CE4665A1AA237C458F21AFDF09807E293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_110c8a4c27b5f3dbcd31b31b760bdc74_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_110c8a4c27b5f3dbcd31b31b760bdc74_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_110c8a4c27b5f3dbcd31b31b760bdc74_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 7.5MB
- SHA256 a03f2fd0a37aee235279c769057de426e8c5cd6baa5ab7dd3843a8cc3971d452
- MD5 110c8a4c27b5f3dbcd31b31b760bdc74
- SHA1 adcb0ce5b6c3cf888cd612d9f29440e5e3415def
- SHA512 4a570a0843958d76ce1fe54c02bdf175845263e5f85cffbb71c08fc8c9afd04bf27655e13e7f3dfc73d3d6aabfc53904cd727585e431146d7e5552f6b4d2092f
- SSDEEP 98304:5uUgTH2M2m9UMpu1QfLczqssnKSSdEns+wE9XD8VBI:5xgTH2qBpu1QfLIqsufSdEnV9z8w
- TLSH T1A986081162D99FECC05FD474CE4665A1AA237C458F21AFDF09807E293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application