General
- Target 2026-07-15_4e63a89fa71c1727393fd16cee751a52_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.3MB
- Sample260716-ab93asb13v
- SHA256 be37ad1d191243941321661dca2f550d6c8e6686e6ff4aec81348195808af6d4
- MD5 4e63a89fa71c1727393fd16cee751a52
- SHA1 a91e8a89cf7c059d3db4ddbc7b636bdcbdf6ca80
- SHA512 fcfee0eb4fd115a8e9daba4c1f140d8658ca19004d796c0aa14a6a8ee12c4bfcb3967876ae0840613ced544ee41978c34e4950ba8ae29ca245c095198434fb02
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuff:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0f
- TLSH T11D175C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_4e63a89fa71c1727393fd16cee751a52_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_4e63a89fa71c1727393fd16cee751a52_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.3MB
- SHA256 be37ad1d191243941321661dca2f550d6c8e6686e6ff4aec81348195808af6d4
- MD5 4e63a89fa71c1727393fd16cee751a52
- SHA1 a91e8a89cf7c059d3db4ddbc7b636bdcbdf6ca80
- SHA512 fcfee0eb4fd115a8e9daba4c1f140d8658ca19004d796c0aa14a6a8ee12c4bfcb3967876ae0840613ced544ee41978c34e4950ba8ae29ca245c095198434fb02
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuff:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0f
- TLSH T11D175C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory