General
- Target 2026-07-20_77117bbb67c0b9ccb39fec2b3d024ba3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.9MB
- Sample260720-x2jpcscy9q
- SHA256 46512c1a9a312a0de4f126b7a88d9d32e92c4d7fd774615f5d7d4fa9235fc734
- MD5 77117bbb67c0b9ccb39fec2b3d024ba3
- SHA1 c15f6b244452f0bee3cfff7c6734540215d2d85d
- SHA512 48ebd77f52655373ed58a59e2490f39b1ae5da9efe0d55e0d01110f770ae1b7da2857645f6d215c31c35d82b1aeffa3e10f4d8cbe043b649f6020faaf3a35ca4
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bGW:w7oZSKpIbUwF1VERmj2b9
- TLSH T14DF6CF12B2E40466D06A8139CB628639D7B17C2A8FB1C6DF3150B6DE1E737D17A3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_77117bbb67c0b9ccb39fec2b3d024ba3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_77117bbb67c0b9ccb39fec2b3d024ba3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.9MB
- SHA256 46512c1a9a312a0de4f126b7a88d9d32e92c4d7fd774615f5d7d4fa9235fc734
- MD5 77117bbb67c0b9ccb39fec2b3d024ba3
- SHA1 c15f6b244452f0bee3cfff7c6734540215d2d85d
- SHA512 48ebd77f52655373ed58a59e2490f39b1ae5da9efe0d55e0d01110f770ae1b7da2857645f6d215c31c35d82b1aeffa3e10f4d8cbe043b649f6020faaf3a35ca4
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bGW:w7oZSKpIbUwF1VERmj2b9
- TLSH T14DF6CF12B2E40466D06A8139CB628639D7B17C2A8FB1C6DF3150B6DE1E737D17A3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory