General
- Target 2026-04-15_ea8f163fb5db0dd50ad7e9f51acf1e1a_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 14.1MB
- Sample260415-lrmsgsd17t
- SHA256 754c3cfdf0c5e39a02b20c2080f84178193a8674086c23d4c9169175da9f4da9
- MD5 ea8f163fb5db0dd50ad7e9f51acf1e1a
- SHA1 ece2a2581859d158a7994341743fe06300d3f9b9
- SHA512 05bd2584427554eb5100d6216761c8b02d0234a7a39f1c9c75ba6dc8eae5a5fcb759d6a408d16c5df0d69eb6a2f4616b6577b32218b81252467714b1f0817836
- SSDEEP 98304:OfkchgAOSJdTjfkZcg/PvOAjcXvvOOc5yTIOSAU:Sk0JdHP2HOAoXvvO6TfI
- TLSH T197E6F50F6A7CDD22F17E3DB9C850C6A89A287C944622745738F4BF5EDA732C16E19231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_ea8f163fb5db0dd50ad7e9f51acf1e1a_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_ea8f163fb5db0dd50ad7e9f51acf1e1a_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 14.1MB
- SHA256 754c3cfdf0c5e39a02b20c2080f84178193a8674086c23d4c9169175da9f4da9
- MD5 ea8f163fb5db0dd50ad7e9f51acf1e1a
- SHA1 ece2a2581859d158a7994341743fe06300d3f9b9
- SHA512 05bd2584427554eb5100d6216761c8b02d0234a7a39f1c9c75ba6dc8eae5a5fcb759d6a408d16c5df0d69eb6a2f4616b6577b32218b81252467714b1f0817836
- SSDEEP 98304:OfkchgAOSJdTjfkZcg/PvOAjcXvvOOc5yTIOSAU:Sk0JdHP2HOAoXvvO6TfI
- TLSH T197E6F50F6A7CDD22F17E3DB9C850C6A89A287C944622745738F4BF5EDA732C16E19231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory