General
- Target 2026-07-05_64a767ef52d67bccea1ba64a3e939a1e_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.8MB
- Sample260705-ebk6dscy5n
- SHA256 d7859cbc986df74eb0807edc0ed95efb2f62de09118fee550f422ec385a66570
- MD5 64a767ef52d67bccea1ba64a3e939a1e
- SHA1 840d2484ad7adff53e3413d4eed6683770dd8137
- SHA512 5a9adef5de8d2f79b1d0d2e8d22de6d5d6db2b57440c1f0f57252233d4477048d29242844c22be4c79846b80dbca033a48888b7b462a4d61a314e4e665f7b91b
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJbos:ERXMzXdyZ/K0trFC4QKs
- TLSH T140D69E13F2F44266D076C179CB929629EB713C564BB0C6CFA158B39C1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_64a767ef52d67bccea1ba64a3e939a1e_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_64a767ef52d67bccea1ba64a3e939a1e_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.8MB
- SHA256 d7859cbc986df74eb0807edc0ed95efb2f62de09118fee550f422ec385a66570
- MD5 64a767ef52d67bccea1ba64a3e939a1e
- SHA1 840d2484ad7adff53e3413d4eed6683770dd8137
- SHA512 5a9adef5de8d2f79b1d0d2e8d22de6d5d6db2b57440c1f0f57252233d4477048d29242844c22be4c79846b80dbca033a48888b7b462a4d61a314e4e665f7b91b
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJbos:ERXMzXdyZ/K0trFC4QKs
- TLSH T140D69E13F2F44266D076C179CB929629EB713C564BB0C6CFA158B39C1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory