General
- Target 2026-07-20_9f0cb4415f2aa46306ce11f36e8f8fed_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.0MB
- Sample260720-k5sp8afs7x
- SHA256 52be9381b35bdcde181b8398d3e3eb4783d47b3d19ee9cfd7f7c6fcf1ae93e8a
- MD5 9f0cb4415f2aa46306ce11f36e8f8fed
- SHA1 0c6cd42de73646b6ea6cae8152ec32147bf54834
- SHA512 ac5ba7dd03134cd704262575b0b9be717290cfe37f13257535dca03e920a0c736e6124ec144106e4b6cd1530de3b835c30417b0f43e0b3e782ad02a10884e5e5
- SSDEEP 196608:WYGt0La39CZhQPjTfleGZF6bUpMBF1p/kjRm4OWi2bpds:w7oZwBIbUwF1VERmj2bM
- TLSH T138F6D012B3E84566E07B923AC5728A39E771782A4F31C6CF2150B65E1E737D18E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_9f0cb4415f2aa46306ce11f36e8f8fed_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9f0cb4415f2aa46306ce11f36e8f8fed_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.0MB
- SHA256 52be9381b35bdcde181b8398d3e3eb4783d47b3d19ee9cfd7f7c6fcf1ae93e8a
- MD5 9f0cb4415f2aa46306ce11f36e8f8fed
- SHA1 0c6cd42de73646b6ea6cae8152ec32147bf54834
- SHA512 ac5ba7dd03134cd704262575b0b9be717290cfe37f13257535dca03e920a0c736e6124ec144106e4b6cd1530de3b835c30417b0f43e0b3e782ad02a10884e5e5
- SSDEEP 196608:WYGt0La39CZhQPjTfleGZF6bUpMBF1p/kjRm4OWi2bpds:w7oZwBIbUwF1VERmj2bM
- TLSH T138F6D012B3E84566E07B923AC5728A39E771782A4F31C6CF2150B65E1E737D18E36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory