General
- Target 2026-07-06_e56ea7e0f32a82eb18cd6e9e00ddd79a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 13.1MB
- Sample260706-yd2eyagv2p
- SHA256 5f9458a957879dcc97b7dbf1a9a6ea1a18e54c5334e9dc166a129302b197cfae
- MD5 e56ea7e0f32a82eb18cd6e9e00ddd79a
- SHA1 fb2606a389d94beef055de127d9d4795a10c86a0
- SHA512 0dfdd06243db2ce17a634f210c994b1277a75e358c27aa61e4a282edd00aa494262b6b149154047feb4314ca02607466326b7b03d8ce628e8daeeacfbc933e8e
- SSDEEP 196608:NsPbHOAoXvvOKeGZF6bUpMBF1p/kjRm4OWi2bF:+OTTIbUwF1VERmj2bF
- TLSH T170D6AD0F6E9D4761C86FBD348E55C684E130BC008762A59B2DD07F5DEAB36D9393E222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-06_e56ea7e0f32a82eb18cd6e9e00ddd79a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e56ea7e0f32a82eb18cd6e9e00ddd79a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e56ea7e0f32a82eb18cd6e9e00ddd79a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 13.1MB
- SHA256 5f9458a957879dcc97b7dbf1a9a6ea1a18e54c5334e9dc166a129302b197cfae
- MD5 e56ea7e0f32a82eb18cd6e9e00ddd79a
- SHA1 fb2606a389d94beef055de127d9d4795a10c86a0
- SHA512 0dfdd06243db2ce17a634f210c994b1277a75e358c27aa61e4a282edd00aa494262b6b149154047feb4314ca02607466326b7b03d8ce628e8daeeacfbc933e8e
- SSDEEP 196608:NsPbHOAoXvvOKeGZF6bUpMBF1p/kjRm4OWi2bF:+OTTIbUwF1VERmj2bF
- TLSH T170D6AD0F6E9D4761C86FBD348E55C684E130BC008762A59B2DD07F5DEAB36D9393E222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory