General
- Target 2026-07-20_37220559266c021cb87a8ec61dec08ce_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 7.1MB
- Sample260720-qh8e2sdw2y
- SHA256 3c405113b7c41701120a8f225d280291eb573959c625aea184fc7c5e6d530bff
- MD5 37220559266c021cb87a8ec61dec08ce
- SHA1 8c857efbedbac66de6c2cb923ea4ffec40de2e9e
- SHA512 22580524fdf8d1dfcb0393c69ac3883ecdd3a845b96c1189818cd9448cc64a6d5eeac2cef42f9c921120840159699d689d6eeb50ba4c1dea8208608a46709648
- SSDEEP 49152:K8MKzq+9MIQkETwgjI45TMwwapIgTMVBXdcmgjI45TMwwapIgTCT3S9tsgX8zEC2:vak1LapIjdHLapIRTIOSAo
- TLSH T172764B2272E1046AE1AE913ADF25463493E17C3E8FF2C3AB701475CA5E727C17A26717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_37220559266c021cb87a8ec61dec08ce_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_37220559266c021cb87a8ec61dec08ce_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 7.1MB
- SHA256 3c405113b7c41701120a8f225d280291eb573959c625aea184fc7c5e6d530bff
- MD5 37220559266c021cb87a8ec61dec08ce
- SHA1 8c857efbedbac66de6c2cb923ea4ffec40de2e9e
- SHA512 22580524fdf8d1dfcb0393c69ac3883ecdd3a845b96c1189818cd9448cc64a6d5eeac2cef42f9c921120840159699d689d6eeb50ba4c1dea8208608a46709648
- SSDEEP 49152:K8MKzq+9MIQkETwgjI45TMwwapIgTMVBXdcmgjI45TMwwapIgTCT3S9tsgX8zEC2:vak1LapIjdHLapIRTIOSAo
- TLSH T172764B2272E1046AE1AE913ADF25463493E17C3E8FF2C3AB701475CA5E727C17A26717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory