General
- Target 2026-09-29_2cbf85e5b605fde1a3742e66a9b80397_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar
- Size 6.4MB
- Sample260930-ebecvaea52
- SHA256 e6fb276247dd7799a2cff1a46ff74dac3204a02638df8937a0b32a3bdf5b98be
- MD5 2cbf85e5b605fde1a3742e66a9b80397
- SHA1 f14fbeebfec073355d76980c52e8a5583820a77f
- SHA512 ae09cf1731d6e4b30cc858c7fef8377d19010cc161314ba958544e8c8a89039ffc13efef9d20de9a10864190bdc06b52deee06c10a4b172083e2d45e5e6a6cff
- SSDEEP 98304:xsS4neH0KUgTH2M2m9UMpu1QfLczqssnKSE:xsrne0gTH2qBpu1QfLIqsufE
- TLSH T1A266B31165DA9FDCC05F9474CE0669B16A237C868F61AFDB0980BE293E756F06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-29_2cbf85e5b605fde1a3742e66a9b80397_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_2cbf85e5b605fde1a3742e66a9b80397_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_2cbf85e5b605fde1a3742e66a9b80397_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_vidar
- Size 6.4MB
- SHA256 e6fb276247dd7799a2cff1a46ff74dac3204a02638df8937a0b32a3bdf5b98be
- MD5 2cbf85e5b605fde1a3742e66a9b80397
- SHA1 f14fbeebfec073355d76980c52e8a5583820a77f
- SHA512 ae09cf1731d6e4b30cc858c7fef8377d19010cc161314ba958544e8c8a89039ffc13efef9d20de9a10864190bdc06b52deee06c10a4b172083e2d45e5e6a6cff
- SSDEEP 98304:xsS4neH0KUgTH2M2m9UMpu1QfLczqssnKSE:xsrne0gTH2qBpu1QfLIqsufE
- TLSH T1A266B31165DA9FDCC05F9474CE0669B16A237C868F61AFDB0980BE293E756F06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1