General
- Target 2026-07-02_55e28df63b43bb0c130caef5b87c57f8_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- Sample260702-3vm14agw9v
- SHA256 17faee2630599663ea821a7a0d0c8346d41cdc2600062bcb26dd3cd0817114cb
- MD5 55e28df63b43bb0c130caef5b87c57f8
- SHA1 a54bd7dab73c9297cc50ef55ef47c3cb65d0d495
- SHA512 d78dc1d1ed06b483be90e7bf8ce7149f7c5c5366f14a36803505590e09653ec300100b01694fdfecad2c58530b985f1d1b695110c84a36624b54a56d402f3285
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2brTfZ:ERXMo5UkIbUwF1VERmj2b3x
- TLSH T19207AE03F393891BE1A99639C430893593713B7E8BB386AFBC1CB48DE57A3535516B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-02_55e28df63b43bb0c130caef5b87c57f8_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_55e28df63b43bb0c130caef5b87c57f8_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260629-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_55e28df63b43bb0c130caef5b87c57f8_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- SHA256 17faee2630599663ea821a7a0d0c8346d41cdc2600062bcb26dd3cd0817114cb
- MD5 55e28df63b43bb0c130caef5b87c57f8
- SHA1 a54bd7dab73c9297cc50ef55ef47c3cb65d0d495
- SHA512 d78dc1d1ed06b483be90e7bf8ce7149f7c5c5366f14a36803505590e09653ec300100b01694fdfecad2c58530b985f1d1b695110c84a36624b54a56d402f3285
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2brTfZ:ERXMo5UkIbUwF1VERmj2b3x
- TLSH T19207AE03F393891BE1A99639C430893593713B7E8BB386AFBC1CB48DE57A3535516B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory