General
- Target 2026-10-27_e686699fe46dc7c1c95b7b94ac63aa51_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 2.5MB
- Sample261027-31ea5seg52
- SHA256 f85972f5b8e29678d753c758f3fd67e5bfe977bbdaafdbb27bef374baf296fde
- MD5 e686699fe46dc7c1c95b7b94ac63aa51
- SHA1 f12271c9dce5e07c28f8a5ff38a082c65ef73d7b
- SHA512 7144d34d97bb26f7998704fe73b549dd2d719a516dd2252cb2f51b6c119d27eb4c58d991f977bcfebcc08d965c342ce1dccedab09a9c905c74bf27d4c9e6c45d
- SSDEEP 49152:QoRgpx6slT7xKfuPS3ELNjV7FZxEfOflgwf0voGbnQ/7WUT9K:Hepx6slqm9pZxjg/o0
- TLSH T147C54A32B2F200A9D86D95359F665731D6E2BC628FB0C7DB821092191F635D07E3A72F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-27_e686699fe46dc7c1c95b7b94ac63aa51_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_e686699fe46dc7c1c95b7b94ac63aa51_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_e686699fe46dc7c1c95b7b94ac63aa51_akira_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar
- Size 2.5MB
- SHA256 f85972f5b8e29678d753c758f3fd67e5bfe977bbdaafdbb27bef374baf296fde
- MD5 e686699fe46dc7c1c95b7b94ac63aa51
- SHA1 f12271c9dce5e07c28f8a5ff38a082c65ef73d7b
- SHA512 7144d34d97bb26f7998704fe73b549dd2d719a516dd2252cb2f51b6c119d27eb4c58d991f977bcfebcc08d965c342ce1dccedab09a9c905c74bf27d4c9e6c45d
- SSDEEP 49152:QoRgpx6slT7xKfuPS3ELNjV7FZxEfOflgwf0voGbnQ/7WUT9K:Hepx6slqm9pZxjg/o0
- TLSH T147C54A32B2F200A9D86D95359F665731D6E2BC628FB0C7DB821092191F635D07E3A72F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry