General
- Target 2026-06-28_641630406b209320f20e2d5c8bfc2495_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.6MB
- Sample260630-sstezscs8v
- SHA256 74e4020895633dfe454a2e3db5f67afb4df6f868407e6c7f08406154601958ad
- MD5 641630406b209320f20e2d5c8bfc2495
- SHA1 0cd55d9ef522af104f734162c629d68c97e45f1b
- SHA512 98273b7c7396a5ab8a9af400cecf62cd5e62f33735cee593bcaa2e56886ce805169c238a6d2ddb6bfb83e8038bde409ad174ca11db6badbff43628952925c73b
- SSDEEP 49152:ZD6gqIelOVDTtQY6SoNtaUJ6fUnHpclbwbWAaJiwmqTjcoKVMNuYFmpYqVT3S9t+:Z3qqUHxqPF4VMNW6sTIOSAJ
- TLSH T190568D03F3E40166E069933E81614939D6717C2A9B32C6CFF92CB559997B7E18A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-28_641630406b209320f20e2d5c8bfc2495_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_641630406b209320f20e2d5c8bfc2495_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 5.6MB
- SHA256 74e4020895633dfe454a2e3db5f67afb4df6f868407e6c7f08406154601958ad
- MD5 641630406b209320f20e2d5c8bfc2495
- SHA1 0cd55d9ef522af104f734162c629d68c97e45f1b
- SHA512 98273b7c7396a5ab8a9af400cecf62cd5e62f33735cee593bcaa2e56886ce805169c238a6d2ddb6bfb83e8038bde409ad174ca11db6badbff43628952925c73b
- SSDEEP 49152:ZD6gqIelOVDTtQY6SoNtaUJ6fUnHpclbwbWAaJiwmqTjcoKVMNuYFmpYqVT3S9t+:Z3qqUHxqPF4VMNW6sTIOSAJ
- TLSH T190568D03F3E40166E069933E81614939D6717C2A9B32C6CFF92CB559997B7E18A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory