General
- Target 2026-07-01_7ff3cd7043b4ebfa15f8c2802f133609_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.2MB
- Sample260701-slps8agz2q
- SHA256 3a9f17bdd2cbf10b8c08aa5b3b8d83034f77a1a4222d659e1edd79c2e445a871
- MD5 7ff3cd7043b4ebfa15f8c2802f133609
- SHA1 0e1faf4967757002aff408b68f2b143713e9b4a2
- SHA512 19b86812c797984f930c5472c38cbda02055a8b18a970770db2f7df4020a22cab7a364475da9326b9f52d57ca09e1130a5da5c4c241341d03256bad3d4ba33db
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJW:ERXMzXdyZ/K0trFC4Qg
- TLSH T164D69E13F2F40166D076C179CB929639EB713C5A4BB0C6CFA558B3981E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_7ff3cd7043b4ebfa15f8c2802f133609_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_7ff3cd7043b4ebfa15f8c2802f133609_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.2MB
- SHA256 3a9f17bdd2cbf10b8c08aa5b3b8d83034f77a1a4222d659e1edd79c2e445a871
- MD5 7ff3cd7043b4ebfa15f8c2802f133609
- SHA1 0e1faf4967757002aff408b68f2b143713e9b4a2
- SHA512 19b86812c797984f930c5472c38cbda02055a8b18a970770db2f7df4020a22cab7a364475da9326b9f52d57ca09e1130a5da5c4c241341d03256bad3d4ba33db
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJW:ERXMzXdyZ/K0trFC4Qg
- TLSH T164D69E13F2F40166D076C179CB929639EB713C5A4BB0C6CFA558B3981E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory