General
- Target 2026-07-18_f97305944fb94e4af87f88f0a722e464_akira_cobalt-strike_elex_glassworm_icedid_swisyn_vidar
- Size 5.0MB
- Sample260718-r166dadw9j
- SHA256 c97d80e0be929dd6ee2df413cd885e8186287ebde48267b3dbeb3d7e3dbcdc89
- MD5 f97305944fb94e4af87f88f0a722e464
- SHA1 c78da0874cf736e73c956150be866b01cd800502
- SHA512 36a53024974d2777773b0561190f5f24c164afcb32ba0325fbfa2dc8545de277a9924aad79db3a67c2f7ef7c67484372b94ad80fe33dd5d372f5a86f78fcc478
- SSDEEP 49152:twZO9WR3bEsY6QL3P2F0Lfr5hw6MaqVwZmfj8XqEGGscSvY31Jncs5i8WAeDb+zr:K3CsY6I3P2SLfpowtXBGU3Tn75ip+/DH
- TLSH T1A2364B12FD465DAAC0FDC4B89B5A47939B2076CF0724A5AF35F4116C2F363A21E6E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-18_f97305944fb94e4af87f88f0a722e464_akira_cobalt-strike_elex_glassworm_icedid_swisyn_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_f97305944fb94e4af87f88f0a722e464_akira_cobalt-strike_elex_glassworm_icedid_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_f97305944fb94e4af87f88f0a722e464_akira_cobalt-strike_elex_glassworm_icedid_swisyn_vidar
- Size 5.0MB
- SHA256 c97d80e0be929dd6ee2df413cd885e8186287ebde48267b3dbeb3d7e3dbcdc89
- MD5 f97305944fb94e4af87f88f0a722e464
- SHA1 c78da0874cf736e73c956150be866b01cd800502
- SHA512 36a53024974d2777773b0561190f5f24c164afcb32ba0325fbfa2dc8545de277a9924aad79db3a67c2f7ef7c67484372b94ad80fe33dd5d372f5a86f78fcc478
- SSDEEP 49152:twZO9WR3bEsY6QL3P2F0Lfr5hw6MaqVwZmfj8XqEGGscSvY31Jncs5i8WAeDb+zr:K3CsY6I3P2SLfpowtXBGU3Tn75ip+/DH
- TLSH T1A2364B12FD465DAAC0FDC4B89B5A47939B2076CF0724A5AF35F4116C2F363A21E6E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory