General
- Target 2026-07-30_6938050508aa07b0696518058ba8ca23_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.1MB
- Sample260730-f83blstyhy
- SHA256 db7649be0da24f874b0bb939718e13c2027121f425ad6644b203cd16aad0c961
- MD5 6938050508aa07b0696518058ba8ca23
- SHA1 4f55f1d990fe20c92be2281841e245cb6a272ecd
- SHA512 adf22fbc4b9e12dcad5de08e93c35e3fc9bbe0aba8af4f15c6fdedfb50d95619fb5d4de793749419f1b7b5730102bdb4c0f62f05a2be7d38926ec3633b8e71f6
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2bS:ERXMziJIY092byIY092bS
- TLSH T12C17F103F2D40166E06A933E8072493996717C2A5B35C6CFE96CB51E9D7B7E18A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_6938050508aa07b0696518058ba8ca23_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_6938050508aa07b0696518058ba8ca23_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.1MB
- SHA256 db7649be0da24f874b0bb939718e13c2027121f425ad6644b203cd16aad0c961
- MD5 6938050508aa07b0696518058ba8ca23
- SHA1 4f55f1d990fe20c92be2281841e245cb6a272ecd
- SHA512 adf22fbc4b9e12dcad5de08e93c35e3fc9bbe0aba8af4f15c6fdedfb50d95619fb5d4de793749419f1b7b5730102bdb4c0f62f05a2be7d38926ec3633b8e71f6
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2bS:ERXMziJIY092byIY092bS
- TLSH T12C17F103F2D40166E06A933E8072493996717C2A5B35C6CFE96CB51E9D7B7E18A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory