General
- Target 2026-09-30_c00bca4a83924844f1fdc02b2291d039_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_nymaim_remcos_rhadamanthys_vidar
- Size 5.9MB
- Sample260930-jy9jqa1aqa
- SHA256 6015f10f5f4b2d1190d7e7e39a7638e79944bf7c29232fc9708d77b76a656bdf
- MD5 c00bca4a83924844f1fdc02b2291d039
- SHA1 6bf7a0136f2377b59fc34926368c5251b2c7a1cf
- SHA512 a082f4f26480412cd8d1d8e802bba80dc79c70e6bfb589ec20b97e6029480df8c8a1628059dc91b2c406ef9660e17276e426acebb0b61d68f192d83cb239ffc2
- SSDEEP 49152:p2mfYTOYKaPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+C:p2NKUgTH2M2m9UMpu1QfLczqssnKSh
- TLSH T1AB56C41166DA9FDCC05FA474CE0669A56A237C868F21AFDF09807E253E756B06F3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_c00bca4a83924844f1fdc02b2291d039_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_c00bca4a83924844f1fdc02b2291d039_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_c00bca4a83924844f1fdc02b2291d039_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_nymaim_remcos_rhadamanthys_vidar
- Size 5.9MB
- SHA256 6015f10f5f4b2d1190d7e7e39a7638e79944bf7c29232fc9708d77b76a656bdf
- MD5 c00bca4a83924844f1fdc02b2291d039
- SHA1 6bf7a0136f2377b59fc34926368c5251b2c7a1cf
- SHA512 a082f4f26480412cd8d1d8e802bba80dc79c70e6bfb589ec20b97e6029480df8c8a1628059dc91b2c406ef9660e17276e426acebb0b61d68f192d83cb239ffc2
- SSDEEP 49152:p2mfYTOYKaPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+C:p2NKUgTH2M2m9UMpu1QfLczqssnKSh
- TLSH T1AB56C41166DA9FDCC05FA474CE0669A56A237C868F21AFDF09807E253E756B06F3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1