General
- Target 2026-09-29_5c8bb07b7a74f1a865d5f5dd24e12dab_akira_amadey_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar
- Size 4.8MB
- Sample260930-y6plvavglg
- SHA256 11c762cc4f7b9d52001994b922b6adb723d1e4032fcba1ea0e6368d5e553ba76
- MD5 5c8bb07b7a74f1a865d5f5dd24e12dab
- SHA1 b9d71502e5a0bd70106fe1cd4c3157b667ef4589
- SHA512 733901326569b26e29e638ed6c8394ae821561fd1ac7f57a888a9f863facdf12fb4caa677f468ee1baf3fab561305978cfa88276bdaa7c8d4805df8a514170ab
- SSDEEP 49152:ktbU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpl:ktbUgTH2M2m9UMpu1QfLczqssnKD6p
- TLSH T15C36E712665A5F6CD15FD474CA4A8956AA333C860F31ABEF0281BD353E766F42F38213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_5c8bb07b7a74f1a865d5f5dd24e12dab_akira_amadey_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_5c8bb07b7a74f1a865d5f5dd24e12dab_akira_amadey_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_5c8bb07b7a74f1a865d5f5dd24e12dab_akira_amadey_cobalt-strike_elex_icedid_ipamor_njrat_rhadamanthys_vidar
- Size 4.8MB
- SHA256 11c762cc4f7b9d52001994b922b6adb723d1e4032fcba1ea0e6368d5e553ba76
- MD5 5c8bb07b7a74f1a865d5f5dd24e12dab
- SHA1 b9d71502e5a0bd70106fe1cd4c3157b667ef4589
- SHA512 733901326569b26e29e638ed6c8394ae821561fd1ac7f57a888a9f863facdf12fb4caa677f468ee1baf3fab561305978cfa88276bdaa7c8d4805df8a514170ab
- SSDEEP 49152:ktbU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpl:ktbUgTH2M2m9UMpu1QfLczqssnKD6p
- TLSH T15C36E712665A5F6CD15FD474CA4A8956AA333C860F31ABEF0281BD353E766F42F38213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1