General
- Target 2026-04-15_ed3bd821cc78a1307f76e0e278fe30b9_akira_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 11.9MB
- Sample260415-ls9nmses3t
- SHA256 426e45e9dfa2777543f265c7574786b5d73e42249e2b72f48b9934b439e4b13e
- MD5 ed3bd821cc78a1307f76e0e278fe30b9
- SHA1 9a42095c109a3e94268865194167e7ea1c94225c
- SHA512 119b1695cc60aa50f154af5ea28c3e8f5bd5b8bd01b90af9859142d9234a80c6bf128175c8daee14674d9e38fec8f905b64be25450554c17ebc00351af444d97
- SSDEEP 196608:Tpdyn8OyJgV9z8bd/P1cICoQHOAoXvvOlTfR:FdyndV9GmOTyp
- TLSH T131C69D1A73E44166D0A6917ECA614625E3B1BC298BB1C3CF3144B7DD1EB37D26E3A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_ed3bd821cc78a1307f76e0e278fe30b9_akira_amadey_cobalt-strike_coinminer_darkgate_elex_glass.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_ed3bd821cc78a1307f76e0e278fe30b9_akira_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 11.9MB
- SHA256 426e45e9dfa2777543f265c7574786b5d73e42249e2b72f48b9934b439e4b13e
- MD5 ed3bd821cc78a1307f76e0e278fe30b9
- SHA1 9a42095c109a3e94268865194167e7ea1c94225c
- SHA512 119b1695cc60aa50f154af5ea28c3e8f5bd5b8bd01b90af9859142d9234a80c6bf128175c8daee14674d9e38fec8f905b64be25450554c17ebc00351af444d97
- SSDEEP 196608:Tpdyn8OyJgV9z8bd/P1cICoQHOAoXvvOlTfR:FdyndV9GmOTyp
- TLSH T131C69D1A73E44166D0A6917ECA614625E3B1BC298BB1C3CF3144B7DD1EB37D26E3A312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory