General
- Target 2026-09-29_6f21a65a956713927f76c3c4d97893ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.5MB
- Sample260930-ycceesgf36
- SHA256 3e3ef8271945688e042313ef5ace657920bc130030e0c912af00624d5d88d2a5
- MD5 6f21a65a956713927f76c3c4d97893ce
- SHA1 76d917ea39449474174efa375428e5579b6951ce
- SHA512 f15175c4049deddd7a71316583aae8d901fa534d1d43126eea6954aabe1550e89bb3b76cb099af6eebf03e0268e7a7da69e334318ef1a0dde01608285b7dec5e
- SSDEEP 98304:5TUgTH2M2m9UMpu1QfLczqssnKSKfkZc3:5ogTH2qBpu1QfLIqsufEP3
- TLSH T17566D61161DA9FDCC05FD474CE4669A56A237C468F20AFDF0980BE293E766B06E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-29_6f21a65a956713927f76c3c4d97893ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_6f21a65a956713927f76c3c4d97893ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_6f21a65a956713927f76c3c4d97893ce_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.5MB
- SHA256 3e3ef8271945688e042313ef5ace657920bc130030e0c912af00624d5d88d2a5
- MD5 6f21a65a956713927f76c3c4d97893ce
- SHA1 76d917ea39449474174efa375428e5579b6951ce
- SHA512 f15175c4049deddd7a71316583aae8d901fa534d1d43126eea6954aabe1550e89bb3b76cb099af6eebf03e0268e7a7da69e334318ef1a0dde01608285b7dec5e
- SSDEEP 98304:5TUgTH2M2m9UMpu1QfLczqssnKSKfkZc3:5ogTH2qBpu1QfLIqsufEP3
- TLSH T17566D61161DA9FDCC05FD474CE4669A56A237C468F20AFDF0980BE293E766B06E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1