General
- Target 2026-07-02_79a4641e76333b5bf6163144de31f752_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 19.6MB
- Sample260702-3tenbsds8k
- SHA256 15457d3630802034e3777f08d1403c41af7988882044d282888f5f413559d455
- MD5 79a4641e76333b5bf6163144de31f752
- SHA1 dc8ac53748443917529ee0f772ef2a01039582a0
- SHA512 89039109618ed07ba6bdc1f4110cadd0fc7218a0b2823a4232f2807273984d5b86a7f15429f3cc3fe54a2578695e2e29d4ba55c969e51af4ff8a48fdeaa8bd0f
- SSDEEP 393216:ERXMo5UkIbUwF1VERmj2bxTHNBpu1Qfc0K:ERXMo5UkIY092b9HNBpu1Qfc0K
- TLSH T1FC278D02F2978E9AD15FD434C911957152223F698F735BEFBC487D18FA362A36A3420B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_79a4641e76333b5bf6163144de31f752_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_79a4641e76333b5bf6163144de31f752_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 19.6MB
- SHA256 15457d3630802034e3777f08d1403c41af7988882044d282888f5f413559d455
- MD5 79a4641e76333b5bf6163144de31f752
- SHA1 dc8ac53748443917529ee0f772ef2a01039582a0
- SHA512 89039109618ed07ba6bdc1f4110cadd0fc7218a0b2823a4232f2807273984d5b86a7f15429f3cc3fe54a2578695e2e29d4ba55c969e51af4ff8a48fdeaa8bd0f
- SSDEEP 393216:ERXMo5UkIbUwF1VERmj2bxTHNBpu1Qfc0K:ERXMo5UkIY092b9HNBpu1Qfc0K
- TLSH T1FC278D02F2978E9AD15FD434C911957152223F698F735BEFBC487D18FA362A36A3420B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory