General
- Target 2026-07-28_70f09529dcc63426338edaf2f31670f0_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stealc_stop_vidar
- Size 15.7MB
- Sample260728-vrt18ssvay
- SHA256 5e98c9d71b8c382065bac515897389563c9c09824d447607866a509672ba2689
- MD5 70f09529dcc63426338edaf2f31670f0
- SHA1 4fc6fceae2cd02bde1a8b9a161bb336ee1ffb2a3
- SHA512 9b690013f94e9692eddb49a47e14703b783ae1e04e49409af6cf05243e0e7d00cbb45d88b7cb029b90dae374e1da42821676bd9d4a389d5b9f0c28f6f2d63f55
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo1MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6D:ShwZi32PVTfYocHOAoXvvOMob
- TLSH T11AF63807BE6CCD6AF87E39B5C844CA64D9287C145723355779E0BF5EA9732C23A28231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_70f09529dcc63426338edaf2f31670f0_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_70f09529dcc63426338edaf2f31670f0_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stealc_stop_vidar
- Size 15.7MB
- SHA256 5e98c9d71b8c382065bac515897389563c9c09824d447607866a509672ba2689
- MD5 70f09529dcc63426338edaf2f31670f0
- SHA1 4fc6fceae2cd02bde1a8b9a161bb336ee1ffb2a3
- SHA512 9b690013f94e9692eddb49a47e14703b783ae1e04e49409af6cf05243e0e7d00cbb45d88b7cb029b90dae374e1da42821676bd9d4a389d5b9f0c28f6f2d63f55
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo1MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6D:ShwZi32PVTfYocHOAoXvvOMob
- TLSH T11AF63807BE6CCD6AF87E39B5C844CA64D9287C145723355779E0BF5EA9732C23A28231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory