General
- Target 2026-07-07_b6de8fd2af28b16fa97263fa94e38d94_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 16.2MB
- Sample260707-ync54ads61
- SHA256 5da0556153c697e6ce3d18da7d594a1a75195de1d35897ed5d7c133489ace93a
- MD5 b6de8fd2af28b16fa97263fa94e38d94
- SHA1 f06df6946654bd1a91cd6e600dc09ff39cfa5a0c
- SHA512 0da3bd69f2e30e7b33c9f87a8687920b0358e3f496a1289f06e64c00f8afd37b6d7cff0dc0058e03ae3e4f70271c3846de4cb84a571570f2eb2c1cb6c21db49d
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bBP3:w7oZSKpIbUwF1VERmj2bN
- TLSH T1B307CF12B2E40566D06A8139CB628A35E7B17C2A8FB1C7DF2110B2DE1E737D17A36717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_b6de8fd2af28b16fa97263fa94e38d94_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_b6de8fd2af28b16fa97263fa94e38d94_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 16.2MB
- SHA256 5da0556153c697e6ce3d18da7d594a1a75195de1d35897ed5d7c133489ace93a
- MD5 b6de8fd2af28b16fa97263fa94e38d94
- SHA1 f06df6946654bd1a91cd6e600dc09ff39cfa5a0c
- SHA512 0da3bd69f2e30e7b33c9f87a8687920b0358e3f496a1289f06e64c00f8afd37b6d7cff0dc0058e03ae3e4f70271c3846de4cb84a571570f2eb2c1cb6c21db49d
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bBP3:w7oZSKpIbUwF1VERmj2bN
- TLSH T1B307CF12B2E40566D06A8139CB628A35E7B17C2A8FB1C7DF2110B2DE1E737D17A36717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory