General
- Target 2026-04-16_68da4829789e6bb5e3fd1806aa2f794f_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.7MB
- Sample260416-chabcsd15l
- SHA256 0c8527791a3d13e32d5b99b6ca411dd43bbf80b57355aa3492f81f37c24909fa
- MD5 68da4829789e6bb5e3fd1806aa2f794f
- SHA1 81ccdb880c3feb72986b6fbf93814ef4b7ffad55
- SHA512 a2465cd3451f4b4502487baf82e14fd89e34966f4d84a8fe9b9c1dc12aa3d62ef5f13180c43dcc6dabcb2d829164aba5bd757172717dcb1bd1a76f63073bfaa8
- SSDEEP 393216:ERXMzdlmhtm2EQPSnsuMXQPWmU6yhI2IgX6Yo/U4A:ERXMzdl66YMTA
- TLSH T14CD67D15F2B2217DC22B957880699E37B9303C555B308DBF9188F6742D37AA4993EB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-16_68da4829789e6bb5e3fd1806aa2f794f_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_68da4829789e6bb5e3fd1806aa2f794f_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.7MB
- SHA256 0c8527791a3d13e32d5b99b6ca411dd43bbf80b57355aa3492f81f37c24909fa
- MD5 68da4829789e6bb5e3fd1806aa2f794f
- SHA1 81ccdb880c3feb72986b6fbf93814ef4b7ffad55
- SHA512 a2465cd3451f4b4502487baf82e14fd89e34966f4d84a8fe9b9c1dc12aa3d62ef5f13180c43dcc6dabcb2d829164aba5bd757172717dcb1bd1a76f63073bfaa8
- SSDEEP 393216:ERXMzdlmhtm2EQPSnsuMXQPWmU6yhI2IgX6Yo/U4A:ERXMzdl66YMTA
- TLSH T14CD67D15F2B2217DC22B957880699E37B9303C555B308DBF9188F6742D37AA4993EB33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory