General
- Target 2026-07-09_194f785bc1e7f0692641408f898a4cea_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 21.0MB
- Sample260709-g9glzaev7y
- SHA256 b5e34b56ff74c4e478d85e558e6ab8523ece62e6cf7a74cb9106620103fb323f
- MD5 194f785bc1e7f0692641408f898a4cea
- SHA1 f8cd58d68de8f3da4e351e6b9d884ea0ecf65785
- SHA512 c14fd5bd99ba8c8382b80cf06128c8e9365cb80e24995cc69522e762587034bfa3d847e38faaae500e809fcae4317f0cf84f9a60f5e9577b1268766113a7bb70
- SSDEEP 393216:w7oZSKpIbUwF1VERmj2bBTHNBpu1Qfc0C:4aSKpIY092btHNBpu1Qfc0C
- TLSH T11627AD1272D94E98C05F9034CE125A75A7637C5A8FB19BDF24407EA93E726E06F3920F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_194f785bc1e7f0692641408f898a4cea_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_194f785bc1e7f0692641408f898a4cea_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 21.0MB
- SHA256 b5e34b56ff74c4e478d85e558e6ab8523ece62e6cf7a74cb9106620103fb323f
- MD5 194f785bc1e7f0692641408f898a4cea
- SHA1 f8cd58d68de8f3da4e351e6b9d884ea0ecf65785
- SHA512 c14fd5bd99ba8c8382b80cf06128c8e9365cb80e24995cc69522e762587034bfa3d847e38faaae500e809fcae4317f0cf84f9a60f5e9577b1268766113a7bb70
- SSDEEP 393216:w7oZSKpIbUwF1VERmj2bBTHNBpu1Qfc0C:4aSKpIY092btHNBpu1Qfc0C
- TLSH T11627AD1272D94E98C05F9034CE125A75A7637C5A8FB19BDF24407EA93E726E06F3920F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory