General
- Target 2026-07-20_960026bb9f7859a2180178f0a899ff1b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.1MB
- Sample260720-k8qp2acy3n
- SHA256 fff2d124aa2273a5a9b14d2c55d77441ca8ea891f06058f8b1e8f82016472b83
- MD5 960026bb9f7859a2180178f0a899ff1b
- SHA1 7a900ea9629bef37e51d94c827a0e5be640269cf
- SHA512 1ac6f3d87a9c8fc0caba5f0f5287482b5d10607efabd9462eff552c219f584faab56a25deeffaf1564cf56888ffed2f96a2b6df263fda75c69f256e31ae72e6b
- SSDEEP 196608:WYGt0La39CZhQPjTfleGZF6bUpMBF1p/kjRm4OWi2bEo7:w7oZwBIbUwF1VERmj2b77
- TLSH T19CF6D012B3E84566E07BC13AC5728A79E771782A4F31C6CF2150B65E1E737D28A36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_960026bb9f7859a2180178f0a899ff1b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_960026bb9f7859a2180178f0a899ff1b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.1MB
- SHA256 fff2d124aa2273a5a9b14d2c55d77441ca8ea891f06058f8b1e8f82016472b83
- MD5 960026bb9f7859a2180178f0a899ff1b
- SHA1 7a900ea9629bef37e51d94c827a0e5be640269cf
- SHA512 1ac6f3d87a9c8fc0caba5f0f5287482b5d10607efabd9462eff552c219f584faab56a25deeffaf1564cf56888ffed2f96a2b6df263fda75c69f256e31ae72e6b
- SSDEEP 196608:WYGt0La39CZhQPjTfleGZF6bUpMBF1p/kjRm4OWi2bEo7:w7oZwBIbUwF1VERmj2b77
- TLSH T19CF6D012B3E84566E07BC13AC5728A79E771782A4F31C6CF2150B65E1E737D28A36723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory