General
- Target 2026-07-15_3e170bd4eb34ed5308125e461e548874_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.6MB
- Sample260716-ae8nmsgx4n
- SHA256 28ca65ccca7354a9a570d7de36b8d021ea5d3a771b34a75f20e56b7d3f906577
- MD5 3e170bd4eb34ed5308125e461e548874
- SHA1 e80fdf356d7414f033497adf080007e178f1e71a
- SHA512 7dbd118b329aa69dd7705cda50d234b1453f960bfccd88bbac21579bcb167da8071e6d69f2a0652572b0a3427c09b332ddf1357c93e2596d316107b503ea40e8
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ065:ERXMzXdyZ/K0trFC4QR5
- TLSH T11AD69E13F2F44266D076C179CB925629EB713C5A4BB0C6CFA158B39C1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_3e170bd4eb34ed5308125e461e548874_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_3e170bd4eb34ed5308125e461e548874_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 12.6MB
- SHA256 28ca65ccca7354a9a570d7de36b8d021ea5d3a771b34a75f20e56b7d3f906577
- MD5 3e170bd4eb34ed5308125e461e548874
- SHA1 e80fdf356d7414f033497adf080007e178f1e71a
- SHA512 7dbd118b329aa69dd7705cda50d234b1453f960bfccd88bbac21579bcb167da8071e6d69f2a0652572b0a3427c09b332ddf1357c93e2596d316107b503ea40e8
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ065:ERXMzXdyZ/K0trFC4QR5
- TLSH T11AD69E13F2F44266D076C179CB925629EB713C5A4BB0C6CFA158B39C1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory