General
- Target 2026-07-09_723d4f50d4653c8a0db4aa5db7c02a2c_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.8MB
- Sample260709-vqqmeset6m
- SHA256 f44d2a6451711bb82ce8822363d7c8aa5d919157e36488f0aa75c318b2a4357a
- MD5 723d4f50d4653c8a0db4aa5db7c02a2c
- SHA1 0f91f265ac5578f467bf4e8a5f97f3ada5ba7f78
- SHA512 6bcc40abb88d24daf47cdda7e5d4c7bc8c0cbc3a4ab021c5efaad813de85122b2bb3cdc15c6bb94ad346fe74a76594f5b6bd91246ed6532f0a369d34dad05c33
- SSDEEP 98304:vak1LapISKUgTH2M2m9UMpu1QfLczqssnKS5TIOSAB:vD1cISgTH2qBpu1QfLIqsuf5Tfd
- TLSH T10DB6492222D58F9DC05F9038CE1669B157637C5A8FB19BDF28407DA93E726E06E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_723d4f50d4653c8a0db4aa5db7c02a2c_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_723d4f50d4653c8a0db4aa5db7c02a2c_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.8MB
- SHA256 f44d2a6451711bb82ce8822363d7c8aa5d919157e36488f0aa75c318b2a4357a
- MD5 723d4f50d4653c8a0db4aa5db7c02a2c
- SHA1 0f91f265ac5578f467bf4e8a5f97f3ada5ba7f78
- SHA512 6bcc40abb88d24daf47cdda7e5d4c7bc8c0cbc3a4ab021c5efaad813de85122b2bb3cdc15c6bb94ad346fe74a76594f5b6bd91246ed6532f0a369d34dad05c33
- SSDEEP 98304:vak1LapISKUgTH2M2m9UMpu1QfLczqssnKS5TIOSAB:vD1cISgTH2qBpu1QfLIqsuf5Tfd
- TLSH T10DB6492222D58F9DC05F9038CE1669B157637C5A8FB19BDF28407DA93E726E06E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory