General
- Target 2026-07-21_4b0b774cf1029dbffd6a80663a9f405b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 21.6MB
- Sample260721-vyz6tsda95
- SHA256 8f03b70b3a07a9ccf4605749ddbe5a0affbe0203a938f6c7833244be6b2c7543
- MD5 4b0b774cf1029dbffd6a80663a9f405b
- SHA1 603b1d8e074e5c089a688be52d1f253264083b7e
- SHA512 989aa139915ed4cd327b5266d2021d441d02b8d78c6c7f2348c621d9b48c5bd3693c74817c682f797689bd4b356f80ce862c6ef59e73c128544a29ad633b4820
- SSDEEP 393216:w7oZSKpIbUwF1VERmj2bBTHNBpu1Qfc0HA:4aSKpIY092btHNBpu1Qfc0HA
- TLSH T11C37AD1272D94E98C06FD034CE125A75A6637C568FB19BDF24407EA93E726E06F3920F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_4b0b774cf1029dbffd6a80663a9f405b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_4b0b774cf1029dbffd6a80663a9f405b_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 21.6MB
- SHA256 8f03b70b3a07a9ccf4605749ddbe5a0affbe0203a938f6c7833244be6b2c7543
- MD5 4b0b774cf1029dbffd6a80663a9f405b
- SHA1 603b1d8e074e5c089a688be52d1f253264083b7e
- SHA512 989aa139915ed4cd327b5266d2021d441d02b8d78c6c7f2348c621d9b48c5bd3693c74817c682f797689bd4b356f80ce862c6ef59e73c128544a29ad633b4820
- SSDEEP 393216:w7oZSKpIbUwF1VERmj2bBTHNBpu1Qfc0HA:4aSKpIY092btHNBpu1Qfc0HA
- TLSH T11C37AD1272D94E98C06FD034CE125A75A6637C568FB19BDF24407EA93E726E06F3920F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory