General
- Target 2026-07-30_bdee3e230bcb545fed4770778ceb8922_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 18.5MB
- Sample260730-vlpjkacf36
- SHA256 7cabadbb11c33dc3fa0ebeef473f989108fa5260c1a8146364e2af63005c939d
- MD5 bdee3e230bcb545fed4770778ceb8922
- SHA1 cba9d0dd6e22cf0ceb60898ca9d6ceefe985300b
- SHA512 11ab849e801eddae350da64efd0742fe38ab640f10f4393415a1dde443f4495736917d278fbb1b23cc1a345ce87789e4bed7a53c1d9ff06d7b0ea8d84847b8e5
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2b/:ERXMziJIY092byIY092b/
- TLSH T13217F102F2D401A6E06A933D81724939D6717C2A5B31C6CFE96CB51E5E7B7E14A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_bdee3e230bcb545fed4770778ceb8922_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_bdee3e230bcb545fed4770778ceb8922_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 18.5MB
- SHA256 7cabadbb11c33dc3fa0ebeef473f989108fa5260c1a8146364e2af63005c939d
- MD5 bdee3e230bcb545fed4770778ceb8922
- SHA1 cba9d0dd6e22cf0ceb60898ca9d6ceefe985300b
- SHA512 11ab849e801eddae350da64efd0742fe38ab640f10f4393415a1dde443f4495736917d278fbb1b23cc1a345ce87789e4bed7a53c1d9ff06d7b0ea8d84847b8e5
- SSDEEP 393216:ERXMziJIbUwF1VERmj2byIbUwF1VERmj2b/:ERXMziJIY092byIY092b/
- TLSH T13217F102F2D401A6E06A933D81724939D6717C2A5B31C6CFE96CB51E5E7B7E14A3E313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory