General
- Target 2026-10-16_76154dd1c0d85b54003bd56a94596376_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 5.7MB
- Sample261017-rrv2rag17v
- SHA256 1ac29ec125695cd56405ff33c18764c37c1150baa0357a44f1e9a1d2e7575367
- MD5 76154dd1c0d85b54003bd56a94596376
- SHA1 092e577f38afb3ecd8d507bec4fa7803f9c229e9
- SHA512 31ba38bdcc289909fee3f0597adbdc1e61d64e0da8f5407c6fb9db36cb197c2998c9a25b2c5af2a9a3753de8a9367f4e7ff0e211aa52ab34056271fc6e1c550a
- SSDEEP 49152:3sKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpi:cKUgTH2M2m9UMpu1QfLczqssnKS4
- TLSH T1D056B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-16_76154dd1c0d85b54003bd56a94596376_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_76154dd1c0d85b54003bd56a94596376_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_76154dd1c0d85b54003bd56a94596376_akira_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 5.7MB
- SHA256 1ac29ec125695cd56405ff33c18764c37c1150baa0357a44f1e9a1d2e7575367
- MD5 76154dd1c0d85b54003bd56a94596376
- SHA1 092e577f38afb3ecd8d507bec4fa7803f9c229e9
- SHA512 31ba38bdcc289909fee3f0597adbdc1e61d64e0da8f5407c6fb9db36cb197c2998c9a25b2c5af2a9a3753de8a9367f4e7ff0e211aa52ab34056271fc6e1c550a
- SSDEEP 49152:3sKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/Uybpi:cKUgTH2M2m9UMpu1QfLczqssnKS4
- TLSH T1D056B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application