General
- Target 2026-07-05_71168701764a2586590a0133d915a0dd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.7MB
- Sample260705-eanj5ahs61
- SHA256 3fc377a7cd429414ee876ec4b4706a89ac15599597ef27164a61e15c76751419
- MD5 71168701764a2586590a0133d915a0dd
- SHA1 bca65812ffada71972e85ee7d6fb5935d2a13dc3
- SHA512 d675d2513aba2091dfafc16fd0352cdfa8db5f39c7403c5f63d0ac8a15744324f1e476fb8665f36f68b121c3d91b82ec9b459410b23072d8ffabaaff1c088cab
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJedf:ERXMzXdyZ/K0trFC4QQ
- TLSH T11ED69E13F2F40166D076D13DCB925625EB713C5A4BB0C6CFA158B3991E377E1AA3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_71168701764a2586590a0133d915a0dd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_71168701764a2586590a0133d915a0dd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.7MB
- SHA256 3fc377a7cd429414ee876ec4b4706a89ac15599597ef27164a61e15c76751419
- MD5 71168701764a2586590a0133d915a0dd
- SHA1 bca65812ffada71972e85ee7d6fb5935d2a13dc3
- SHA512 d675d2513aba2091dfafc16fd0352cdfa8db5f39c7403c5f63d0ac8a15744324f1e476fb8665f36f68b121c3d91b82ec9b459410b23072d8ffabaaff1c088cab
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJedf:ERXMzXdyZ/K0trFC4QQ
- TLSH T11ED69E13F2F40166D076D13DCB925625EB713C5A4BB0C6CFA158B3991E377E1AA3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory