General
- Target 2026-09-21_6ce96744e33359cd85b65949c2cddc98_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.5MB
- Sample260922-prskhsed86
- SHA256 196cde7c6853c7a57f0351fb12b21e8569920e05462a08848f4caf32bc5f3b57
- MD5 6ce96744e33359cd85b65949c2cddc98
- SHA1 dcae5e68c5c63931273999c2ce30c93e937a684c
- SHA512 26ba21741b955ee6d3160954222598f36e638a264d216bcbd699974f73f336896e33e335d1a4488aa2da7201c4a1719446135b91190e5a1cc9b0ed580eeb1376
- SSDEEP 98304:5uUgTH2M2m9UMpu1QfLczqssnKSPs+wE9XD8VBo:5xgTH2qBpu1QfLIqsufPV9z8A
- TLSH T15166E51162DA9FDCC05FA474CE0669B16A237C468F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-21_6ce96744e33359cd85b65949c2cddc98_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_6ce96744e33359cd85b65949c2cddc98_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_6ce96744e33359cd85b65949c2cddc98_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.5MB
- SHA256 196cde7c6853c7a57f0351fb12b21e8569920e05462a08848f4caf32bc5f3b57
- MD5 6ce96744e33359cd85b65949c2cddc98
- SHA1 dcae5e68c5c63931273999c2ce30c93e937a684c
- SHA512 26ba21741b955ee6d3160954222598f36e638a264d216bcbd699974f73f336896e33e335d1a4488aa2da7201c4a1719446135b91190e5a1cc9b0ed580eeb1376
- SSDEEP 98304:5uUgTH2M2m9UMpu1QfLczqssnKSPs+wE9XD8VBo:5xgTH2qBpu1QfLIqsufPV9z8A
- TLSH T15166E51162DA9FDCC05FA474CE0669B16A237C468F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application