General
- Target 2026-09-29_3bcb7b3ef1e9231094daad0c7d5fa05a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.5MB
- Sample260930-1vtsjayyh1
- SHA256 11b371574a6c2853ca210b2990e887e58388d3a906aefc03af2184dd25f26391
- MD5 3bcb7b3ef1e9231094daad0c7d5fa05a
- SHA1 0699764b06810ec7fa1178c2cb54aa0622e4fe41
- SHA512 1bc732ad9240327eb944e3bfe47045c5046447beb2323b5d9134462483e5eff74cb43e816b57d7e3eb2073ca1a2414b935eef9b7ce1501c9027469e0a84055a0
- SSDEEP 98304:m+UgTH2M2m9UMpu1QfLczqssnKSTfkZcl:mhgTH2qBpu1QfLIqsufrPl
- TLSH T14D66D61161DA9FDCC05FD474CE4669A56A237C468F20AFDF0980BE293E766B06E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-29_3bcb7b3ef1e9231094daad0c7d5fa05a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_3bcb7b3ef1e9231094daad0c7d5fa05a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_3bcb7b3ef1e9231094daad0c7d5fa05a_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.5MB
- SHA256 11b371574a6c2853ca210b2990e887e58388d3a906aefc03af2184dd25f26391
- MD5 3bcb7b3ef1e9231094daad0c7d5fa05a
- SHA1 0699764b06810ec7fa1178c2cb54aa0622e4fe41
- SHA512 1bc732ad9240327eb944e3bfe47045c5046447beb2323b5d9134462483e5eff74cb43e816b57d7e3eb2073ca1a2414b935eef9b7ce1501c9027469e0a84055a0
- SSDEEP 98304:m+UgTH2M2m9UMpu1QfLczqssnKSTfkZcl:mhgTH2qBpu1QfLIqsufrPl
- TLSH T14D66D61161DA9FDCC05FD474CE4669A56A237C468F20AFDF0980BE293E766B06E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1