General
- Target 2026-09-29_22f84c7a382286c535809204d1aadbc5_akira_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar
- Size 4.3MB
- Sample260930-25dpqstyaz
- SHA256 edef33e52bb7f2a1703767dcfb72553196708e2e76f945254debbd894a7046e8
- MD5 22f84c7a382286c535809204d1aadbc5
- SHA1 db861e9df2af7bd09f4f108dab6c4792557716f7
- SHA512 ac92307a9e0fa9f33c10bdd7053dc15cb71b3b420c97ccc87ea087cb17dc4ecfc75e3dd2fec5dfadfa8a72f1364c77ce3aecbfb3bfe0a91d0a6964354df54102
- SSDEEP 49152:ktbU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybp3:ktbUgTH2M2m9UMpu1QfLczqssnKy
- TLSH T19126D712665A2F6CD15FD474CB4B8916AA237C8A0F216BEF4281BD353E766F42F38107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_22f84c7a382286c535809204d1aadbc5_akira_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_22f84c7a382286c535809204d1aadbc5_akira_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_22f84c7a382286c535809204d1aadbc5_akira_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar
- Size 4.3MB
- SHA256 edef33e52bb7f2a1703767dcfb72553196708e2e76f945254debbd894a7046e8
- MD5 22f84c7a382286c535809204d1aadbc5
- SHA1 db861e9df2af7bd09f4f108dab6c4792557716f7
- SHA512 ac92307a9e0fa9f33c10bdd7053dc15cb71b3b420c97ccc87ea087cb17dc4ecfc75e3dd2fec5dfadfa8a72f1364c77ce3aecbfb3bfe0a91d0a6964354df54102
- SSDEEP 49152:ktbU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybp3:ktbUgTH2M2m9UMpu1QfLczqssnKy
- TLSH T19126D712665A2F6CD15FD474CB4B8916AA237C8A0F216BEF4281BD353E766F42F38107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1