General
- Target 2026-07-02_6a658ff1bce01660f7721471197d9eb9_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260702-qf2vgsb15m
- SHA256 326ee3d78bf2b8288ddce4dd91ce9edf5a6774cfc900498530878db16d03f33c
- MD5 6a658ff1bce01660f7721471197d9eb9
- SHA1 b90e73a33ff9037069a1b7e89805f041b1f274ef
- SHA512 99d7262b07094090e963958651c41c16670df883b875577fcc1179dd3f3a67ab86cb303720492358381b747caf6fdabfae11755f9ecfd399a6cabacd09f9ee8c
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b+dT:ERXMo5UkIbUwF1VERmj2bq
- TLSH T148E6BF03F293895BE195D639C421853592713F7E87B385AFFC1CB18CEA3B2936529B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_6a658ff1bce01660f7721471197d9eb9_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_6a658ff1bce01660f7721471197d9eb9_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 326ee3d78bf2b8288ddce4dd91ce9edf5a6774cfc900498530878db16d03f33c
- MD5 6a658ff1bce01660f7721471197d9eb9
- SHA1 b90e73a33ff9037069a1b7e89805f041b1f274ef
- SHA512 99d7262b07094090e963958651c41c16670df883b875577fcc1179dd3f3a67ab86cb303720492358381b747caf6fdabfae11755f9ecfd399a6cabacd09f9ee8c
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b+dT:ERXMo5UkIbUwF1VERmj2bq
- TLSH T148E6BF03F293895BE195D639C421853592713F7E87B385AFFC1CB18CEA3B2936529B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory