General
- Target 2026-07-07_a1d3ca4a3ecbd4c56af86143991b512b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.4MB
- Sample260707-yvb7dadv2t
- SHA256 b89f203f18a17a6723633474baaffc889ec2294229f5c161d69c75694fc23320
- MD5 a1d3ca4a3ecbd4c56af86143991b512b
- SHA1 e0e27627a21d49f8c416526e0055a523d5b8e4b1
- SHA512 92c0b57a3515e5395283270f2a9f280c2c35737d98cadce10557e9dc6b7aaddeafc0c026c0d30ce80f688db578a3031c1884fb851cd0b2ac654cc898ebcd625f
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bT:w7oZSKpIbUwF1VERmj2bT
- TLSH T109F6CF1272E404A6D16A913ACB22863597B17C2A8FF2C7DF315076CE1E736C17A3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_a1d3ca4a3ecbd4c56af86143991b512b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_a1d3ca4a3ecbd4c56af86143991b512b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.4MB
- SHA256 b89f203f18a17a6723633474baaffc889ec2294229f5c161d69c75694fc23320
- MD5 a1d3ca4a3ecbd4c56af86143991b512b
- SHA1 e0e27627a21d49f8c416526e0055a523d5b8e4b1
- SHA512 92c0b57a3515e5395283270f2a9f280c2c35737d98cadce10557e9dc6b7aaddeafc0c026c0d30ce80f688db578a3031c1884fb851cd0b2ac654cc898ebcd625f
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bT:w7oZSKpIbUwF1VERmj2bT
- TLSH T109F6CF1272E404A6D16A913ACB22863597B17C2A8FF2C7DF315076CE1E736C17A3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory