General
- Target 2026-07-14_0d1949d189bccf62d8a439b58be13e5d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_matanbuchus_njrat_remcos_smoke-loader_swisyn_vidar
- Size 62.8MB
- Sample260714-2n7aqahs5v
- SHA256 fd85cc1194b655ada769e70707c94065f22c6e62bdb5872d3b77b2da3d7478d0
- MD5 0d1949d189bccf62d8a439b58be13e5d
- SHA1 c7de4ec206a041fb5ebf214a29ea102c44181395
- SHA512 3348ddd2dfa75753215713c17dc42decc05b72f89bb9c10f5b8a3f148d872f6c5ec22f904cc16144a08a572879775632b9a146f44d7949165c65bab725e77b19
- SSDEEP 1572864:6J5hH40sC6SwwbJTD6Dq+d5CpU4VWZ7Mwg+Dzg1t:6NcrSwH2+YpU4s7MZ+Q1t
- TLSH T1F1E7330276A441B8E0F7D278D9179A0BE6747C4A43B081AF739C605A2F733E19F7A752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_0d1949d189bccf62d8a439b58be13e5d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_0d1949d189bccf62d8a439b58be13e5d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_0d1949d189bccf62d8a439b58be13e5d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_matanbuchus_njrat_remcos_smoke-loader_swisyn_vidar
- Size 62.8MB
- SHA256 fd85cc1194b655ada769e70707c94065f22c6e62bdb5872d3b77b2da3d7478d0
- MD5 0d1949d189bccf62d8a439b58be13e5d
- SHA1 c7de4ec206a041fb5ebf214a29ea102c44181395
- SHA512 3348ddd2dfa75753215713c17dc42decc05b72f89bb9c10f5b8a3f148d872f6c5ec22f904cc16144a08a572879775632b9a146f44d7949165c65bab725e77b19
- SSDEEP 1572864:6J5hH40sC6SwwbJTD6Dq+d5CpU4VWZ7Mwg+Dzg1t:6NcrSwH2+YpU4s7MZ+Q1t
- TLSH T1F1E7330276A441B8E0F7D278D9179A0BE6747C4A43B081AF739C605A2F733E19F7A752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory