General
- Target 2026-07-06_b5517bfffb6a3a97104cf3905936d193_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.9MB
- Sample260707-btrt4sct2n
- SHA256 a3fc5999ce2902beb175b2d9ebf66dc4f72d419fbad7d9a2c9c6e492c23b7aa5
- MD5 b5517bfffb6a3a97104cf3905936d193
- SHA1 bebe1a992d21b311edc7328d4c5fbb48ccfa79a2
- SHA512 f67d18155f7a2254027ebf58c9fd6e8c117408d266bc9300dacc79231a461503d00bfd8aba7a6e12ad90a8e5173a33b44bd69152b197359c72207684fd29844f
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bnoO:w7oZSKpIbUwF1VERmj2boO
- TLSH T139F6CF12B2E40466D06A813ACB628635D7B17C2A8FB1C6DF3150B6DE1E737D17A3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_b5517bfffb6a3a97104cf3905936d193_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_b5517bfffb6a3a97104cf3905936d193_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.9MB
- SHA256 a3fc5999ce2902beb175b2d9ebf66dc4f72d419fbad7d9a2c9c6e492c23b7aa5
- MD5 b5517bfffb6a3a97104cf3905936d193
- SHA1 bebe1a992d21b311edc7328d4c5fbb48ccfa79a2
- SHA512 f67d18155f7a2254027ebf58c9fd6e8c117408d266bc9300dacc79231a461503d00bfd8aba7a6e12ad90a8e5173a33b44bd69152b197359c72207684fd29844f
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bnoO:w7oZSKpIbUwF1VERmj2boO
- TLSH T139F6CF12B2E40466D06A813ACB628635D7B17C2A8FB1C6DF3150B6DE1E737D17A3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory