General
- Target 2026-07-19_0380c2f6de3ec49f8e6548d7df698c68_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.9MB
- Sample260720-cc2tesex2w
- SHA256 2f6c2a2dfca26aed7c5cdab183548c59d54ca41a4e530e0953037d7e3ba866c9
- MD5 0380c2f6de3ec49f8e6548d7df698c68
- SHA1 3be98c2a40fd1a3661c83d6017a240ab89642ca8
- SHA512 4fa060bcbbc9bed09ef240ade11ced3c18a8b79783647542902753b0a4468f26e318b7cf2bde8cc711bd24928b178a5c22fbb32edac0e6d9ee7afa1f08a4f414
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b56EoB:ERXMo5UkIbUwF1VERmj2bI7B
- TLSH T1DDF6BF03F293891BE1A5D239C461853592713B7E87B385EFFC1CB19CEA3B2936525B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_0380c2f6de3ec49f8e6548d7df698c68_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_0380c2f6de3ec49f8e6548d7df698c68_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.9MB
- SHA256 2f6c2a2dfca26aed7c5cdab183548c59d54ca41a4e530e0953037d7e3ba866c9
- MD5 0380c2f6de3ec49f8e6548d7df698c68
- SHA1 3be98c2a40fd1a3661c83d6017a240ab89642ca8
- SHA512 4fa060bcbbc9bed09ef240ade11ced3c18a8b79783647542902753b0a4468f26e318b7cf2bde8cc711bd24928b178a5c22fbb32edac0e6d9ee7afa1f08a4f414
- SSDEEP 196608:ZaHxXMZ6+oYTfYeGZF6bUpMBF1p/kjRm4OWi2b56EoB:ERXMo5UkIbUwF1VERmj2bI7B
- TLSH T1DDF6BF03F293891BE1A5D239C461853592713B7E87B385EFFC1CB19CEA3B2936525B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory