General
- Target 2026-04-15_2587bf01450066006e8829b6e0d4fd74_akira_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_kwampirs_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.2MB
- Sample260415-qw72faas41
- SHA256 765dcd4e5e6cbb7f12e4e7184dc437f572b2c3554d6ca8fde849db3cabba254c
- MD5 2587bf01450066006e8829b6e0d4fd74
- SHA1 baf8eacfc676cdbfb1c3c07ebe19cdd64f692b7d
- SHA512 5e6f9d07c0387437e427a9720cd6475fd4c25017db63bb6ba5e0db3cf6a58ff7302e3e66e09b46835f2d617e920937a59e0f0f15d7382e06d254d7224283b88d
- SSDEEP 98304:Hx1bDE9F8N8f01iuciNu2zPnj/7pxXo1PTJxjRXzkTIOSAT/PvOAjcXvvOOc5R:TbDE92NwnYBzzXo1LdzkTfHHOAoXvvOZ
- TLSH T1F2C68D1EBBD44876E1BB42394972561DD275FC228B32828F31546B1E5EB2FC28E36713
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_2587bf01450066006e8829b6e0d4fd74_akira_cobalt-strike_darkgate_elex_glassworm_hijackloader.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_2587bf01450066006e8829b6e0d4fd74_akira_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_kwampirs_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.2MB
- SHA256 765dcd4e5e6cbb7f12e4e7184dc437f572b2c3554d6ca8fde849db3cabba254c
- MD5 2587bf01450066006e8829b6e0d4fd74
- SHA1 baf8eacfc676cdbfb1c3c07ebe19cdd64f692b7d
- SHA512 5e6f9d07c0387437e427a9720cd6475fd4c25017db63bb6ba5e0db3cf6a58ff7302e3e66e09b46835f2d617e920937a59e0f0f15d7382e06d254d7224283b88d
- SSDEEP 98304:Hx1bDE9F8N8f01iuciNu2zPnj/7pxXo1PTJxjRXzkTIOSAT/PvOAjcXvvOOc5R:TbDE92NwnYBzzXo1LdzkTfHHOAoXvvOZ
- TLSH T1F2C68D1EBBD44876E1BB42394972561DD275FC228B32828F31546B1E5EB2FC28E36713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory