General
- Target 2026-07-22_12da5f44adc3651a2b0cb43797b4c2fa_akira_cobalt-strike_elex_glassworm_icedid_vidar
- Size 640KB
- Sample260723-apcc7axhld
- SHA256 0a29fa45a966b6076aeb805127914722e957281255fb628e115f3f6571d16987
- MD5 12da5f44adc3651a2b0cb43797b4c2fa
- SHA1 6c795cab307c771a571ef322018101aae356ba89
- SHA512 169274fb329d1dcd9d8a6277c8b19de1bb2bd641c0088fb24d2bb601d4a3a1295c66834636b12f3a67dd53c87a02a5df6f97428998430c84ddde3f1e52961dc6
- SSDEEP 12288:I+TRftYFFk1boJWI7PhagJ72UGnAlGWm2G40:IoRftaFh7PMWDGv4
- TLSH T1CED47C11B6514879C06B823886239922E7767CA25771AFEF32DC352A3F37BD05E38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_12da5f44adc3651a2b0cb43797b4c2fa_akira_cobalt-strike_elex_glassworm_icedid_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_12da5f44adc3651a2b0cb43797b4c2fa_akira_cobalt-strike_elex_glassworm_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_12da5f44adc3651a2b0cb43797b4c2fa_akira_cobalt-strike_elex_glassworm_icedid_vidar
- Size 640KB
- SHA256 0a29fa45a966b6076aeb805127914722e957281255fb628e115f3f6571d16987
- MD5 12da5f44adc3651a2b0cb43797b4c2fa
- SHA1 6c795cab307c771a571ef322018101aae356ba89
- SHA512 169274fb329d1dcd9d8a6277c8b19de1bb2bd641c0088fb24d2bb601d4a3a1295c66834636b12f3a67dd53c87a02a5df6f97428998430c84ddde3f1e52961dc6
- SSDEEP 12288:I+TRftYFFk1boJWI7PhagJ72UGnAlGWm2G40:IoRftaFh7PMWDGv4
- TLSH T1CED47C11B6514879C06B823886239922E7767CA25771AFEF32DC352A3F37BD05E38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Detects executables containing URLs to raw contents of a Github gist