General
- Target 2026-04-24_4ec22ca9c408f1b7b97c89a49e90b460_akira_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 21.0MB
- Sample260425-awsnraf17j
- SHA256 f0081876c5199058e8464c989087dcb3d11f17e4f5301f42e6b5fc3a8f529af8
- MD5 4ec22ca9c408f1b7b97c89a49e90b460
- SHA1 d1c3e67834ac45bece5f2feed8b315ae61716571
- SHA512 48c98ecf205ebfd2ec9566636d48edfec1e527af32674dcd23093962fa4a5e66b5f92b9905f15792cf1efcf04d504ecc184d200e9a01607caca089e8e20556cd
- SSDEEP 196608:3ipKD0OdjBnvjeApaAvkt1vUpTfejrOOwH+vDdU:SpyjNvjtIAvkuGjrOB+G
- TLSH T1B6277D036ADC8BA5E06FAD30CD2596B546237C458E309BDB2DC07E197A712D16E3D32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-24_4ec22ca9c408f1b7b97c89a49e90b460_akira_amadey_cloudeye_cobalt-strike_darkgate_elex_glassw.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_4ec22ca9c408f1b7b97c89a49e90b460_akira_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 21.0MB
- SHA256 f0081876c5199058e8464c989087dcb3d11f17e4f5301f42e6b5fc3a8f529af8
- MD5 4ec22ca9c408f1b7b97c89a49e90b460
- SHA1 d1c3e67834ac45bece5f2feed8b315ae61716571
- SHA512 48c98ecf205ebfd2ec9566636d48edfec1e527af32674dcd23093962fa4a5e66b5f92b9905f15792cf1efcf04d504ecc184d200e9a01607caca089e8e20556cd
- SSDEEP 196608:3ipKD0OdjBnvjeApaAvkt1vUpTfejrOOwH+vDdU:SpyjNvjtIAvkuGjrOB+G
- TLSH T1B6277D036ADC8BA5E06FAD30CD2596B546237C458E309BDB2DC07E197A712D16E3D32B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Drops file in System32 directory