General
- Target 2026-10-13_0b38f1ada8a2251d672f7254b5487972_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.3MB
- Sample261015-ysc1wsct3v
- SHA256 32be10f723a966e1f2be456f6fec668543003e084ab44988deda1e1f9dbb59a3
- MD5 0b38f1ada8a2251d672f7254b5487972
- SHA1 c9e58ab0165b4937ea410a4755e4cc404a409e40
- SHA512 118074ab8d4c40edda6ba3584c1dd42c308280edaff716fc0a4b0f0a3e55dccb4f321da40332b44c889f1f170e7381977fdbba83c240aabf490e24c36ad8af77
- SSDEEP 49152:5vU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpud:5vUgTH2M2m9UMpu1QfLczqssnKSZG
- TLSH T18166C51161DA9FDCC05FD474CE4669A16A237C468F21AFDF0980BE293E766B06E3811F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-13_0b38f1ada8a2251d672f7254b5487972_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_0b38f1ada8a2251d672f7254b5487972_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_0b38f1ada8a2251d672f7254b5487972_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 6.3MB
- SHA256 32be10f723a966e1f2be456f6fec668543003e084ab44988deda1e1f9dbb59a3
- MD5 0b38f1ada8a2251d672f7254b5487972
- SHA1 c9e58ab0165b4937ea410a4755e4cc404a409e40
- SHA512 118074ab8d4c40edda6ba3584c1dd42c308280edaff716fc0a4b0f0a3e55dccb4f321da40332b44c889f1f170e7381977fdbba83c240aabf490e24c36ad8af77
- SSDEEP 49152:5vU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpud:5vUgTH2M2m9UMpu1QfLczqssnKSZG
- TLSH T18166C51161DA9FDCC05FD474CE4669A16A237C468F21AFDF0980BE293E766B06E3811F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application