General
- Target 2026-07-30_ef44f870ad4a320855915814e97888c3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 18.9MB
- Sample260730-valcrswsgw
- SHA256 0b4f4cf051bf6b39803e8eff5eca64b3ee214befb50fb1e0f8965a8364e76c87
- MD5 ef44f870ad4a320855915814e97888c3
- SHA1 6347ef6d36a1ada83fd0783759e4a9e7774c8b3b
- SHA512 cd9e1dbcc4b2a6dd687b59721b9b85ca36f5a90b4d00699792316514f316ead5c54f60db42088391295bed9cc78d1b7e72534153f3978eb8ac1c2ecea3474d47
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2bA:ERXMziJIY092byIY092bA
- TLSH T1A517F102F2E40166E076933DC0625939E6717C2A5B31C6CFE96CB61D5D7B7E18A3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_ef44f870ad4a320855915814e97888c3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ef44f870ad4a320855915814e97888c3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 18.9MB
- SHA256 0b4f4cf051bf6b39803e8eff5eca64b3ee214befb50fb1e0f8965a8364e76c87
- MD5 ef44f870ad4a320855915814e97888c3
- SHA1 6347ef6d36a1ada83fd0783759e4a9e7774c8b3b
- SHA512 cd9e1dbcc4b2a6dd687b59721b9b85ca36f5a90b4d00699792316514f316ead5c54f60db42088391295bed9cc78d1b7e72534153f3978eb8ac1c2ecea3474d47
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2bA:ERXMziJIY092byIY092bA
- TLSH T1A517F102F2E40166E076933DC0625939E6717C2A5B31C6CFE96CB61D5D7B7E18A3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory