General
- Target 2026-07-11_6aa41ba15ee92a5dadbf5c002ea7d0d2_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.4MB
- Sample260711-1agbpscx6v
- SHA256 88869b0bc9a78f7b0084244bd8498d6a3b7bb124c04a1b732b7ef898bc00cfe3
- MD5 6aa41ba15ee92a5dadbf5c002ea7d0d2
- SHA1 28d5b9b04290f7b715adb3a70d4e6b926bacf625
- SHA512 6b6edfaee30aceb67a0e5b57fbb62cc728a6c403bb043811d1c93d08efe8e2fc80a59bc09aecca4c3e3bbb5e3bfc39fe66f1efb4f556aabfcb65d9fdeba53350
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bP:w7oZSKpIbUwF1VERmj2bP
- TLSH T1B5F6CF1272E404A6D16A913ACB22863597B17C2A8FF2C7DF315076CE1E736C17A3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_6aa41ba15ee92a5dadbf5c002ea7d0d2_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_6aa41ba15ee92a5dadbf5c002ea7d0d2_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.4MB
- SHA256 88869b0bc9a78f7b0084244bd8498d6a3b7bb124c04a1b732b7ef898bc00cfe3
- MD5 6aa41ba15ee92a5dadbf5c002ea7d0d2
- SHA1 28d5b9b04290f7b715adb3a70d4e6b926bacf625
- SHA512 6b6edfaee30aceb67a0e5b57fbb62cc728a6c403bb043811d1c93d08efe8e2fc80a59bc09aecca4c3e3bbb5e3bfc39fe66f1efb4f556aabfcb65d9fdeba53350
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bP:w7oZSKpIbUwF1VERmj2bP
- TLSH T1B5F6CF1272E404A6D16A913ACB22863597B17C2A8FF2C7DF315076CE1E736C17A3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory