General
- Target 2026-07-29_5129d38a3dd7f74a0e7d383a3dab56c7_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.8MB
- Sample260730-cb62raxbqd
- SHA256 531baa5429c879de875ed969be70d5887e448f6562b3c06c8cfa3ae32902ee7d
- MD5 5129d38a3dd7f74a0e7d383a3dab56c7
- SHA1 fb14ba8e062036463113416dff00ba229a0ca40f
- SHA512 fa5c11b335c3f75ae5ee55cbf759383eaf847e7cd7a81b62345e5bb5f0163af8f05256b03f1051ebab3b8b164a1d32d2f949180484c0d2c5b2f27421574fd7b1
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2q:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0l
- TLSH T184176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_5129d38a3dd7f74a0e7d383a3dab56c7_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_5129d38a3dd7f74a0e7d383a3dab56c7_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.8MB
- SHA256 531baa5429c879de875ed969be70d5887e448f6562b3c06c8cfa3ae32902ee7d
- MD5 5129d38a3dd7f74a0e7d383a3dab56c7
- SHA1 fb14ba8e062036463113416dff00ba229a0ca40f
- SHA512 fa5c11b335c3f75ae5ee55cbf759383eaf847e7cd7a81b62345e5bb5f0163af8f05256b03f1051ebab3b8b164a1d32d2f949180484c0d2c5b2f27421574fd7b1
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2q:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0l
- TLSH T184176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory