General
- Target 2026-07-06_f946db20e91f8a1f0460203c7ba983b1_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 20.1MB
- Sample260706-3tkvcaaw5k
- SHA256 45282f9c90d5e87774c25ff343812802b40080c8a6a43d0c81aac5147a8fc272
- MD5 f946db20e91f8a1f0460203c7ba983b1
- SHA1 83ab6eadc0da32e0655df7b63c6d9f9ea05dacef
- SHA512 b9c977699b7137c394a2aaffbac1982a1c95c19fb7601000fca2f1c1b923e0853bb31376d807c69f3206c41f8763708176363b700fabfbe42935c68c0949b618
- SSDEEP 393216:ERXMo5UkIbUwF1VERmj2bxTHNBpu1Qfc0/u:ERXMo5UkIY092b9HNBpu1Qfc0/u
- TLSH T19F278D02F2978F9AD15FD034C911957196223F698F738BDF78487D58FA362A36A3420B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_f946db20e91f8a1f0460203c7ba983b1_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f946db20e91f8a1f0460203c7ba983b1_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 20.1MB
- SHA256 45282f9c90d5e87774c25ff343812802b40080c8a6a43d0c81aac5147a8fc272
- MD5 f946db20e91f8a1f0460203c7ba983b1
- SHA1 83ab6eadc0da32e0655df7b63c6d9f9ea05dacef
- SHA512 b9c977699b7137c394a2aaffbac1982a1c95c19fb7601000fca2f1c1b923e0853bb31376d807c69f3206c41f8763708176363b700fabfbe42935c68c0949b618
- SSDEEP 393216:ERXMo5UkIbUwF1VERmj2bxTHNBpu1Qfc0/u:ERXMo5UkIY092b9HNBpu1Qfc0/u
- TLSH T19F278D02F2978F9AD15FD034C911957196223F698F738BDF78487D58FA362A36A3420B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory