General
- Target 2026-07-02_f3b89ab5226e06ea641f983a0a9f45a2_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 18.0MB
- Sample260702-tkk93set9p
- SHA256 b4dde65c32c76e3cf4ef610c47c80b029d4a086a28a37cb8419e1435b0822526
- MD5 f3b89ab5226e06ea641f983a0a9f45a2
- SHA1 9415430d151211942f272eaa96f1cc8fa88627c5
- SHA512 4cbe3702c1ed35ed0b339478a4da6de84e0f9f907a6e364ceef3f3c10813571165b5739ab8b6eecd2549654e3965d188a5a8b4a58a71ab89471b0aa72f8c7d98
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2b/:ERXMziJIY092byIY092b/
- TLSH T1F6170103F2D40166E06A933E8072493996717C3A5B36C6CFE96CB51E997B7E14A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_f3b89ab5226e06ea641f983a0a9f45a2_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f3b89ab5226e06ea641f983a0a9f45a2_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 18.0MB
- SHA256 b4dde65c32c76e3cf4ef610c47c80b029d4a086a28a37cb8419e1435b0822526
- MD5 f3b89ab5226e06ea641f983a0a9f45a2
- SHA1 9415430d151211942f272eaa96f1cc8fa88627c5
- SHA512 4cbe3702c1ed35ed0b339478a4da6de84e0f9f907a6e364ceef3f3c10813571165b5739ab8b6eecd2549654e3965d188a5a8b4a58a71ab89471b0aa72f8c7d98
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2b/:ERXMziJIY092byIY092b/
- TLSH T1F6170103F2D40166E06A933E8072493996717C3A5B36C6CFE96CB51E997B7E14A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory