General
- Target 2026-07-02_8d5b040acd056dd0f15cf374254dc47b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.4MB
- Sample260702-3sqdfagw6w
- SHA256 a0310439dc8c3db4b08339c80b34ec3741742ef90137b7e0d968e6d4c32d914d
- MD5 8d5b040acd056dd0f15cf374254dc47b
- SHA1 813da30f1087b0b5edd1e7f91832e1268dd39a98
- SHA512 a5803407fe2e9a4f5ee48f6f198bf9f19bdd8900614617d6881c87c4d952e129108a8c04c3726d6329c3d5218197d6f284b3dffe0ce3731c2731774171cca98c
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b7o8:ERXMo5UkIbUwF1VERmj2bE8
- TLSH T1B7E6BF03F293891BE195D639C461853592713B7E87B385EFFC1CB18CEA3B2936529B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_8d5b040acd056dd0f15cf374254dc47b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_8d5b040acd056dd0f15cf374254dc47b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.4MB
- SHA256 a0310439dc8c3db4b08339c80b34ec3741742ef90137b7e0d968e6d4c32d914d
- MD5 8d5b040acd056dd0f15cf374254dc47b
- SHA1 813da30f1087b0b5edd1e7f91832e1268dd39a98
- SHA512 a5803407fe2e9a4f5ee48f6f198bf9f19bdd8900614617d6881c87c4d952e129108a8c04c3726d6329c3d5218197d6f284b3dffe0ce3731c2731774171cca98c
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b7o8:ERXMo5UkIbUwF1VERmj2bE8
- TLSH T1B7E6BF03F293891BE195D639C461853592713B7E87B385EFFC1CB18CEA3B2936529B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory