General
- Target 2026-07-22_3ad8712a2e9840ccc818644f6fdde4a4_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stealc_stop_vidar
- Size 14.4MB
- Sample260723-aekltaxdqe
- SHA256 7225cfb6f644ef1d6d1b4326c095257983cf3a2059fcceb7fd76ffe0fd466e81
- MD5 3ad8712a2e9840ccc818644f6fdde4a4
- SHA1 35dd3e0a5dd29805cfb6d73363019b0cf1a92047
- SHA512 137ad561d40febb9c98557682283e24c25d73488562a4ef8ec792761b4acc6d3a1e5113fbca5d31f24aeb714e1445c29b57d04d7541d59fe8ab5d17266d024d7
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo5/PvOAjcXvvOOc5/:ShwZi32PVTfYoFHOAoXvvO3
- TLSH T1C7E638077E6CDC6AF96E39B5C844CA60DD287C1856233557B9E0BF5EE9732C23A18231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_3ad8712a2e9840ccc818644f6fdde4a4_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_3ad8712a2e9840ccc818644f6fdde4a4_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stealc_stop_vidar
- Size 14.4MB
- SHA256 7225cfb6f644ef1d6d1b4326c095257983cf3a2059fcceb7fd76ffe0fd466e81
- MD5 3ad8712a2e9840ccc818644f6fdde4a4
- SHA1 35dd3e0a5dd29805cfb6d73363019b0cf1a92047
- SHA512 137ad561d40febb9c98557682283e24c25d73488562a4ef8ec792761b4acc6d3a1e5113fbca5d31f24aeb714e1445c29b57d04d7541d59fe8ab5d17266d024d7
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo5/PvOAjcXvvOOc5/:ShwZi32PVTfYoFHOAoXvvO3
- TLSH T1C7E638077E6CDC6AF96E39B5C844CA60DD287C1856233557B9E0BF5EE9732C23A18231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory