General
- Target 2026-07-10_d0dbedf712270184df0b47e22879aadb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar_wannacry
- Size 6.8MB
- Sample260710-vs5jcsdt3r
- SHA256 1e20f1a33125539126d597707f025d6f42f87062cec014278c7ea385e39a3124
- MD5 d0dbedf712270184df0b47e22879aadb
- SHA1 383515f9e6985799863fb7a3aca0ecf8277a2037
- SHA512 1da3355938b07389ab0672539a0479d8333d0d5c5d73a3910eaaacf9bb6358339c2c8e867d64b86495b65c670a9dd9d84cb79af6d9602eab133e3ff43b9c105c
- SSDEEP 49152:kpEqJtb2ILOuYPji0AjVgjI45TMwwapIgTIPji0AjRRJ7T3S9tsgX8zEC8ULgCST:kqcKjovLapIPjoFR5TIOSA3jol
- TLSH T133766D22B2F44626D06AD17ACAA15629D7B13C2A8BF1C7CB7104B6DD1E737C1B536323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-10_d0dbedf712270184df0b47e22879aadb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_d0dbedf712270184df0b47e22879aadb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_d0dbedf712270184df0b47e22879aadb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar_wannacry
- Size 6.8MB
- SHA256 1e20f1a33125539126d597707f025d6f42f87062cec014278c7ea385e39a3124
- MD5 d0dbedf712270184df0b47e22879aadb
- SHA1 383515f9e6985799863fb7a3aca0ecf8277a2037
- SHA512 1da3355938b07389ab0672539a0479d8333d0d5c5d73a3910eaaacf9bb6358339c2c8e867d64b86495b65c670a9dd9d84cb79af6d9602eab133e3ff43b9c105c
- SSDEEP 49152:kpEqJtb2ILOuYPji0AjVgjI45TMwwapIgTIPji0AjRRJ7T3S9tsgX8zEC8ULgCST:kqcKjovLapIPjoFR5TIOSA3jol
- TLSH T133766D22B2F44626D06AD17ACAA15629D7B13C2A8BF1C7CB7104B6DD1E737C1B536323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory