General
- Target 2026-07-22_12ec96cc1a073abecfde580b2ccba696_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_stop_vidar
- Size 17.3MB
- Sample260722-wt38csen7y
- SHA256 882f69da1d2ef1975e7544d04eec0bcbbdef50686e3c8677f79bd97f07cbf111
- MD5 12ec96cc1a073abecfde580b2ccba696
- SHA1 a7538c3fc6b6a375b3339c8dca59cb01c98f1489
- SHA512 38593bab6589e840c03fb62807609ff7fd513da73fe905e735bfad1f3e14c3647eacb368b49bd2ea9f2ce81ab183ccf08858c109f270a57a69e7051d30228bc6
- SSDEEP 196608:ShwZi32PVTfIPTgTH2qBpu1QfLIqsufjd4:Syo6FTHNBpu1Qfc0m
- TLSH T1CF072A026DACDEA9E46F78B4CC4595B05D263C054E227ADB79D0BF2DB9321D07A3813B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_12ec96cc1a073abecfde580b2ccba696_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_12ec96cc1a073abecfde580b2ccba696_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_stop_vidar
- Size 17.3MB
- SHA256 882f69da1d2ef1975e7544d04eec0bcbbdef50686e3c8677f79bd97f07cbf111
- MD5 12ec96cc1a073abecfde580b2ccba696
- SHA1 a7538c3fc6b6a375b3339c8dca59cb01c98f1489
- SHA512 38593bab6589e840c03fb62807609ff7fd513da73fe905e735bfad1f3e14c3647eacb368b49bd2ea9f2ce81ab183ccf08858c109f270a57a69e7051d30228bc6
- SSDEEP 196608:ShwZi32PVTfIPTgTH2qBpu1QfLIqsufjd4:Syo6FTHNBpu1Qfc0m
- TLSH T1CF072A026DACDEA9E46F78B4CC4595B05D263C054E227ADB79D0BF2DB9321D07A3813B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory