General
- Target 2026-10-14_d354d49e22696d6a72168917066b6d0d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 6.6MB
- Sample261014-njgbvatycs
- SHA256 36af29597c0ee2c7d4d25b677cd24798379f206ef0a7f94e1da4a83f1b002c25
- MD5 d354d49e22696d6a72168917066b6d0d
- SHA1 d151787f351d6c0fc3ab96379feeeea99c973429
- SHA512 7470ec80443d29ba5602f1bd084bd73f20c387273accd0888db3cb72400426deb900f8002c15804a8b5048bfe063ba24854c48c06f1e6f4469c7d55367c6c003
- SSDEEP 98304:kthUgTH2M2m9UMpu1QfLczqssnKS8dV6E:DgTH2qBpu1QfLIqsuf8dV6E
- TLSH T1EB66D61162D99FDCC05FD474CE4669A16A237C458F21AFDF0980BE293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-14_d354d49e22696d6a72168917066b6d0d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipam.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_d354d49e22696d6a72168917066b6d0d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipam.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_d354d49e22696d6a72168917066b6d0d_akira_amadey_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 6.6MB
- SHA256 36af29597c0ee2c7d4d25b677cd24798379f206ef0a7f94e1da4a83f1b002c25
- MD5 d354d49e22696d6a72168917066b6d0d
- SHA1 d151787f351d6c0fc3ab96379feeeea99c973429
- SHA512 7470ec80443d29ba5602f1bd084bd73f20c387273accd0888db3cb72400426deb900f8002c15804a8b5048bfe063ba24854c48c06f1e6f4469c7d55367c6c003
- SSDEEP 98304:kthUgTH2M2m9UMpu1QfLczqssnKS8dV6E:DgTH2qBpu1QfLIqsuf8dV6E
- TLSH T1EB66D61162D99FDCC05FD474CE4669A16A237C458F21AFDF0980BE293E766B06E3821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application