General
- Target 2026-07-24_2e31ac6b81f7fdb1578497b6c8bccf16_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_stealc_stop_vidar
- Size 17.3MB
- Sample260724-z3d7datckf
- SHA256 741cd81671296fcd60ae52283fe439c8e34f209c4a8ab54d986d9d363c986830
- MD5 2e31ac6b81f7fdb1578497b6c8bccf16
- SHA1 74c8d1f010d748b3f8b9aec2de50b26e68562715
- SHA512 e735bf42d94e557cbc4208fe1b60686b664bac9b8022804401fb2879a0ea11d0e639de0c191544664b2f37b031f85c817cddd2be4367fdb503ba50673dae8ad1
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo1MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6m:ShwZi32PVTfYoDjrOOwH+vv
- TLSH T1870729027DA8DEA9E86F78B0CC4595B14D1A3C155E227ADB79E0BF1DB9321D03A3413B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-24_2e31ac6b81f7fdb1578497b6c8bccf16_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_2e31ac6b81f7fdb1578497b6c8bccf16_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_stealc_stop_vidar
- Size 17.3MB
- SHA256 741cd81671296fcd60ae52283fe439c8e34f209c4a8ab54d986d9d363c986830
- MD5 2e31ac6b81f7fdb1578497b6c8bccf16
- SHA1 74c8d1f010d748b3f8b9aec2de50b26e68562715
- SHA512 e735bf42d94e557cbc4208fe1b60686b664bac9b8022804401fb2879a0ea11d0e639de0c191544664b2f37b031f85c817cddd2be4367fdb503ba50673dae8ad1
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo1MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6m:ShwZi32PVTfYoDjrOOwH+vv
- TLSH T1870729027DA8DEA9E86F78B0CC4595B14D1A3C155E227ADB79E0BF1DB9321D03A3413B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory