General
- Target 2026-05-06_1b7a2e77a92f652bb698d7e18c61857b_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_kwampirs_njrat_remcos_stealc_vidar
- Size 11.0MB
- Sample260506-mdd4vsft3v
- SHA256 cbc8d9cd64d4551bf49bd5a8d1ef18e89a73e8717f7bb2e996603a3bb913988c
- MD5 1b7a2e77a92f652bb698d7e18c61857b
- SHA1 89a5b6a59dcbf4aed1e405926f470dfef9060531
- SHA512 e322e01ba58d905bc3d8408193ea18b2465e30730528e6302c0710b8ae208d0f07c84f895800d570fc413320a02675d97a5a2c91d03b08c4e14ea0f9171f11bd
- SSDEEP 98304:f2g1PTJxjRXzBTIOSAKevoirV0t/iLwHft8vA6fkZcC:eg1LdzBTf1jrOOwH+vRPC
- TLSH T197C63819BAD48FA9C05F9034C96266B956237C568F319BCF2940BE29BD71FE04E3121F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-06_1b7a2e77a92f652bb698d7e18c61857b_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_1b7a2e77a92f652bb698d7e18c61857b_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_kwampirs_njrat_remcos_stealc_vidar
- Size 11.0MB
- SHA256 cbc8d9cd64d4551bf49bd5a8d1ef18e89a73e8717f7bb2e996603a3bb913988c
- MD5 1b7a2e77a92f652bb698d7e18c61857b
- SHA1 89a5b6a59dcbf4aed1e405926f470dfef9060531
- SHA512 e322e01ba58d905bc3d8408193ea18b2465e30730528e6302c0710b8ae208d0f07c84f895800d570fc413320a02675d97a5a2c91d03b08c4e14ea0f9171f11bd
- SSDEEP 98304:f2g1PTJxjRXzBTIOSAKevoirV0t/iLwHft8vA6fkZcC:eg1LdzBTf1jrOOwH+vRPC
- TLSH T197C63819BAD48FA9C05F9034C96266B956237C568F319BCF2940BE29BD71FE04E3121F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Drops file in System32 directory