General
- Target 2026-04-17_a7c199c355e58c5f709d0bd41ddca87a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 14.8MB
- Sample260417-tqa2ascw7p
- SHA256 78bb10ffeaa1b79f13ff2a5a74ff8e3fb0b83f1c93a0de14383e55c291ae8f41
- MD5 a7c199c355e58c5f709d0bd41ddca87a
- SHA1 3091516c46091953372f17ce92f311870bdd0a11
- SHA512 10f3d49c3800604b9ecc2556937b4416d9586b1326801b1496e40d9f79481157035a877ae19294e9f84ca52a2da93c75567cf157996259a43c7991e6714ba16a
- SSDEEP 196608:ZaHxXME6o966HtIto0A/WyZ/K0ttYVAATqTfrHdT:ERXMzn6YoeyZ/K0ttYZTOB
- TLSH T1B6F67E12F2B6207DD21B953881298E33BA303C155BB19DFF6544F6B41D36AE46A3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-17_a7c199c355e58c5f709d0bd41ddca87a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_a7c199c355e58c5f709d0bd41ddca87a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 14.8MB
- SHA256 78bb10ffeaa1b79f13ff2a5a74ff8e3fb0b83f1c93a0de14383e55c291ae8f41
- MD5 a7c199c355e58c5f709d0bd41ddca87a
- SHA1 3091516c46091953372f17ce92f311870bdd0a11
- SHA512 10f3d49c3800604b9ecc2556937b4416d9586b1326801b1496e40d9f79481157035a877ae19294e9f84ca52a2da93c75567cf157996259a43c7991e6714ba16a
- SSDEEP 196608:ZaHxXME6o966HtIto0A/WyZ/K0ttYVAATqTfrHdT:ERXMzn6YoeyZ/K0ttYZTOB
- TLSH T1B6F67E12F2B6207DD21B953881298E33BA303C155BB19DFF6544F6B41D36AE46A3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory