General
- Target 2026-06-30_5dc614ec7fe60c8109fc5b968b66dd77_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 13.1MB
- Sample260701-fectvsew2q
- SHA256 6e481997e213c2fed8e7fd475bb746c21199b9024676002065908d234e43340e
- MD5 5dc614ec7fe60c8109fc5b968b66dd77
- SHA1 4c3edfcbafb61ee73ac8d974742e53efcb77662d
- SHA512 2ee73900e3aa8515a45107c8b4cbdcc12fdda36ac47ed820464e8a28734f2ba384445d7ed5061db4e3c4653577dc24b5f792f6b5fb34da097820e8440cb4d185
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ062oL:ERXMzXdyZ/K0trFC4QRRL
- TLSH T18BD68E13F2F44266D076C179CA929629EB713C564BB0C6CF6158F3AC1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_5dc614ec7fe60c8109fc5b968b66dd77_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_5dc614ec7fe60c8109fc5b968b66dd77_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 13.1MB
- SHA256 6e481997e213c2fed8e7fd475bb746c21199b9024676002065908d234e43340e
- MD5 5dc614ec7fe60c8109fc5b968b66dd77
- SHA1 4c3edfcbafb61ee73ac8d974742e53efcb77662d
- SHA512 2ee73900e3aa8515a45107c8b4cbdcc12fdda36ac47ed820464e8a28734f2ba384445d7ed5061db4e3c4653577dc24b5f792f6b5fb34da097820e8440cb4d185
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ062oL:ERXMzXdyZ/K0trFC4QRRL
- TLSH T18BD68E13F2F44266D076C179CA929629EB713C564BB0C6CF6158F3AC1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory