General
- Target 2026-07-02_9a6a0dae69607d96693f36a6705178dc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.4MB
- Sample260702-2kvgracx2r
- SHA256 c481736e77b7ae41ef972a79442bf520e77ce5ea627eeaeb567f6904578188b4
- MD5 9a6a0dae69607d96693f36a6705178dc
- SHA1 d62a1a8533a0c17428621f368553bb44c75cf78f
- SHA512 1b74c43fbc777ac3971cd742bc688bb4717b33c8f4bc0bf044c4052a789caa873785eb97ebc4c1d86ad6128e07fb37465aee3970675611a1ff0eb849a0d3dbb8
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b56+:ERXMo5UkIbUwF1VERmj2bI+
- TLSH T1B1E6BF03F293891BE195D639C461853593713B7E87B385AFFC1CB18CEA3B2936529B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_9a6a0dae69607d96693f36a6705178dc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_9a6a0dae69607d96693f36a6705178dc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.4MB
- SHA256 c481736e77b7ae41ef972a79442bf520e77ce5ea627eeaeb567f6904578188b4
- MD5 9a6a0dae69607d96693f36a6705178dc
- SHA1 d62a1a8533a0c17428621f368553bb44c75cf78f
- SHA512 1b74c43fbc777ac3971cd742bc688bb4717b33c8f4bc0bf044c4052a789caa873785eb97ebc4c1d86ad6128e07fb37465aee3970675611a1ff0eb849a0d3dbb8
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b56+:ERXMo5UkIbUwF1VERmj2bI+
- TLSH T1B1E6BF03F293891BE195D639C461853593713B7E87B385AFFC1CB18CEA3B2936529B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory