General
- Target 2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.9MB
- Sample261024-lpskysef89
- SHA256 c0ef39d9262cb403e6e6cd3cd989f2d2c37b4e1e00805b39a78de7afcefe9fc8
- MD5 6bf31ea61482b429865a972daf4fba1a
- SHA1 c7834e729a63c640877825d9690fa258f074839f
- SHA512 fc036ee5b9870be89b8fd2b392cbfb870c242c105989abcf778c6f3cc12c917d9c9e3278510a1a7bb8077253042e2269a0e18a61b9f125f2e659da8ecc845b94
- SSDEEP 196608:gTB/NwB/pUhehLJADmmxL2WEoCZX18UBWyZ/K0ttYVAATsa:WAikND/WEDgyZ/K0ttYZTr
- TLSH T132D6BF03F6D540F9E06AD134CA669332EB72BC164BB1A6DF1250B6991E33AD07F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_iced.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6bf31ea61482b429865a972daf4fba1a_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.9MB
- SHA256 c0ef39d9262cb403e6e6cd3cd989f2d2c37b4e1e00805b39a78de7afcefe9fc8
- MD5 6bf31ea61482b429865a972daf4fba1a
- SHA1 c7834e729a63c640877825d9690fa258f074839f
- SHA512 fc036ee5b9870be89b8fd2b392cbfb870c242c105989abcf778c6f3cc12c917d9c9e3278510a1a7bb8077253042e2269a0e18a61b9f125f2e659da8ecc845b94
- SSDEEP 196608:gTB/NwB/pUhehLJADmmxL2WEoCZX18UBWyZ/K0ttYVAATsa:WAikND/WEDgyZ/K0ttYZTr
- TLSH T132D6BF03F6D540F9E06AD134CA669332EB72BC164BB1A6DF1250B6991E33AD07F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry