General
- Target 2026-09-30_8cb789fa89a04e7095a8b8c45283a42f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar
- Size 7.4MB
- Sample260930-lrtwssvs9n
- SHA256 0dbb5232b367d0e40eef76940853784ae4f88f44f39a12b85c9df92205fbdc13
- MD5 8cb789fa89a04e7095a8b8c45283a42f
- SHA1 85d92764af8da2d3114367dd2795731f226bba5f
- SHA512 06eaf71e1d1d0ca0e1686b36eb1f0c9e2309f10a775d42dcbd69d6cdd7322661b3a8e2d7a2a1e71904d4807ba735ecc38b1316cfea2dfa9af75952c300923300
- SSDEEP 98304:kt2KUgTH2M2m9UMpu1QfLczqssnKSJfkZck6jX:/gTH2qBpu1QfLIqsufVPkcX
- TLSH T17B76E61161E98F9CC06FD474CE4669A5AA237C468F209FDF0981BE293E766F05E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-30_8cb789fa89a04e7095a8b8c45283a42f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipam.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_8cb789fa89a04e7095a8b8c45283a42f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipam.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_8cb789fa89a04e7095a8b8c45283a42f_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar
- Size 7.4MB
- SHA256 0dbb5232b367d0e40eef76940853784ae4f88f44f39a12b85c9df92205fbdc13
- MD5 8cb789fa89a04e7095a8b8c45283a42f
- SHA1 85d92764af8da2d3114367dd2795731f226bba5f
- SHA512 06eaf71e1d1d0ca0e1686b36eb1f0c9e2309f10a775d42dcbd69d6cdd7322661b3a8e2d7a2a1e71904d4807ba735ecc38b1316cfea2dfa9af75952c300923300
- SSDEEP 98304:kt2KUgTH2M2m9UMpu1QfLczqssnKSJfkZck6jX:/gTH2qBpu1QfLIqsufVPkcX
- TLSH T17B76E61161E98F9CC06FD474CE4669A5AA237C468F209FDF0981BE293E766F05E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1