General
- Target 2026-07-15_408fcf4f6fdae5f780ccbccf2b9b3443_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 13.2MB
- Sample260716-aeq4lab181
- SHA256 fbc3070f14d63b11569e8f3bec1bd004379320b26a18bb6d127c8187333195c2
- MD5 408fcf4f6fdae5f780ccbccf2b9b3443
- SHA1 43168a25bfd46fa7888aad76f998df5f6efdf577
- SHA512 af4c300189acb6b5a659cce93ae86e6a7f6b4e8b907a30b6ec48f6971604b56af73117f206422e2fc84e97df809c26782206c029ebbdff7cd957834f6a8f9358
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06IG:ERXMzXdyZ/K0trFC4QR/
- TLSH T1B3D68E13F2F44266D076C179CA929629EB713C564BB0C6CF6158F3AC1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_408fcf4f6fdae5f780ccbccf2b9b3443_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_408fcf4f6fdae5f780ccbccf2b9b3443_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 13.2MB
- SHA256 fbc3070f14d63b11569e8f3bec1bd004379320b26a18bb6d127c8187333195c2
- MD5 408fcf4f6fdae5f780ccbccf2b9b3443
- SHA1 43168a25bfd46fa7888aad76f998df5f6efdf577
- SHA512 af4c300189acb6b5a659cce93ae86e6a7f6b4e8b907a30b6ec48f6971604b56af73117f206422e2fc84e97df809c26782206c029ebbdff7cd957834f6a8f9358
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06IG:ERXMzXdyZ/K0trFC4QR/
- TLSH T1B3D68E13F2F44266D076C179CA929629EB713C564BB0C6CF6158F3AC1E377E1A639322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory