General
- Target 2026-07-01_88bd6602b9ed027ce005acbb3816b6b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 15.7MB
- Sample260701-vfk9ysct4s
- SHA256 62cee661ac730c66f7148b23437c3de56617a109bb664559f021d2f8f36219f0
- MD5 88bd6602b9ed027ce005acbb3816b6b4
- SHA1 f1e29b4f8eaa412dda80266484d58863f5f1c7ab
- SHA512 fcbc0b1cf7d5003fa237d6d60fc6f0c97b79690737e5c44b1a4b56652d8d53983c26b517e1c6ce189487ab413ce3b5f6e5a35d82e8bfd2179631fddcdc4af68a
- SSDEEP 393216:ERXMzI3yZ/K0ttYZTIfIbUwF1VERmj2bU:ERXMzI3yZ/K0ttYZTIfIY092bU
- TLSH T10AF6D003F1A401A5D066D278CAA69722EB327C454BB095DF565CB3982F37AF0BB3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_88bd6602b9ed027ce005acbb3816b6b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_88bd6602b9ed027ce005acbb3816b6b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_88bd6602b9ed027ce005acbb3816b6b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 15.7MB
- SHA256 62cee661ac730c66f7148b23437c3de56617a109bb664559f021d2f8f36219f0
- MD5 88bd6602b9ed027ce005acbb3816b6b4
- SHA1 f1e29b4f8eaa412dda80266484d58863f5f1c7ab
- SHA512 fcbc0b1cf7d5003fa237d6d60fc6f0c97b79690737e5c44b1a4b56652d8d53983c26b517e1c6ce189487ab413ce3b5f6e5a35d82e8bfd2179631fddcdc4af68a
- SSDEEP 393216:ERXMzI3yZ/K0ttYZTIfIbUwF1VERmj2bU:ERXMzI3yZ/K0ttYZTIfIY092bU
- TLSH T10AF6D003F1A401A5D066D278CAA69722EB327C454BB095DF565CB3982F37AF0BB3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory