General
- Target 2026-07-08_10193477cc9ac8f1382b70d2ee3ef599_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 19.6MB
- Sample260708-2mfflsas7n
- SHA256 ec209801cd57c0ba751265432026207158d6e183d9842a37505cbcaf603a2e23
- MD5 10193477cc9ac8f1382b70d2ee3ef599
- SHA1 5c3c890e78039e0a6eac8848416571d97238e051
- SHA512 6da3b87b13f7570cb450c75277775d6837c1d077b7a1d4a8134d5ae5271119c14084e85b3355fe101e1506c53402ac0b8eb9fc69cb303aa098e73627f66fd086
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfATfQoo:ERXMo5zqWYdyZ/K0ttYZTUk3o
- TLSH T1AD276B03F29784AAE0A9D138C921863597313F6E87B381DF791871D8EA376D37639712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_10193477cc9ac8f1382b70d2ee3ef599_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_10193477cc9ac8f1382b70d2ee3ef599_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 19.6MB
- SHA256 ec209801cd57c0ba751265432026207158d6e183d9842a37505cbcaf603a2e23
- MD5 10193477cc9ac8f1382b70d2ee3ef599
- SHA1 5c3c890e78039e0a6eac8848416571d97238e051
- SHA512 6da3b87b13f7570cb450c75277775d6837c1d077b7a1d4a8134d5ae5271119c14084e85b3355fe101e1506c53402ac0b8eb9fc69cb303aa098e73627f66fd086
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfATfQoo:ERXMo5zqWYdyZ/K0ttYZTUk3o
- TLSH T1AD276B03F29784AAE0A9D138C921863597313F6E87B381DF791871D8EA376D37639712
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Drops file in System32 directory