General
- Target 2026-07-07_b25357d1ccb23fcdb78b0393323910f6_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 16.1MB
- Sample260707-2qtgmsfv4y
- SHA256 b52ffffa9eceb1cbd08ef473a736dc877a545c4dfaf8f332d94b66e2cd63e67c
- MD5 b25357d1ccb23fcdb78b0393323910f6
- SHA1 2b333411f5e64158ce0e670d791db0f374106dbf
- SHA512 73f442c5f4a38c4916e5f9a95476cac0ce408f83ebf7598000cb51af89c3d973d652d787470839563d9914cc1c9992d11c6b3547576a04a4251535da0b4fbbc1
- SSDEEP 196608:ZaHxXMZ6466HtIto0Aao0THgTH2qBpu1QfLIqsufrdm:ERXMoB6YodAATHNBpu1Qfc0E
- TLSH T158074A01B293AEADC20F94348809997265223F594F734EFFA844FD74FD36563293962B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_b25357d1ccb23fcdb78b0393323910f6_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_b25357d1ccb23fcdb78b0393323910f6_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_vidar
- Size 16.1MB
- SHA256 b52ffffa9eceb1cbd08ef473a736dc877a545c4dfaf8f332d94b66e2cd63e67c
- MD5 b25357d1ccb23fcdb78b0393323910f6
- SHA1 2b333411f5e64158ce0e670d791db0f374106dbf
- SHA512 73f442c5f4a38c4916e5f9a95476cac0ce408f83ebf7598000cb51af89c3d973d652d787470839563d9914cc1c9992d11c6b3547576a04a4251535da0b4fbbc1
- SSDEEP 196608:ZaHxXMZ6466HtIto0Aao0THgTH2qBpu1QfLIqsufrdm:ERXMoB6YodAATHNBpu1Qfc0E
- TLSH T158074A01B293AEADC20F94348809997265223F594F734EFFA844FD74FD36563293962B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory