General
- Target 2026-07-31_dccc1062a8848cb73dfb0cbea55c32ee_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 7.2MB
- Sample260731-tys7vawdpb
- SHA256 d31130885c310a5b9ea0332758e4b515987efe5d689a891b8d3cd461fcb96896
- MD5 dccc1062a8848cb73dfb0cbea55c32ee
- SHA1 9b920f0a57c1da69f347584934b46585108e3737
- SHA512 54dc415dc52347275ceb5ae3698183f93715efcc876e7777525438bc8433fba7dadea2d8ec5d5f7280c2e3b38a1f077cb9fcd4d67eb132a0791f1d749ad5ee71
- SSDEEP 49152:K8MKzq+9MIQkETwgjI45TMwwapIgTGpYqMgjI45TMwwapIgTtT3S9tsgX8zEC8UI:vak1LapIJ6FLapIyTIOSA8
- TLSH T1AA764B2272E10466D1AE913ACF61463493E17C7E8FF2C3AB7004B6DA5E727C17A26717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_dccc1062a8848cb73dfb0cbea55c32ee_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_dccc1062a8848cb73dfb0cbea55c32ee_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 7.2MB
- SHA256 d31130885c310a5b9ea0332758e4b515987efe5d689a891b8d3cd461fcb96896
- MD5 dccc1062a8848cb73dfb0cbea55c32ee
- SHA1 9b920f0a57c1da69f347584934b46585108e3737
- SHA512 54dc415dc52347275ceb5ae3698183f93715efcc876e7777525438bc8433fba7dadea2d8ec5d5f7280c2e3b38a1f077cb9fcd4d67eb132a0791f1d749ad5ee71
- SSDEEP 49152:K8MKzq+9MIQkETwgjI45TMwwapIgTGpYqMgjI45TMwwapIgTtT3S9tsgX8zEC8UI:vak1LapIJ6FLapIyTIOSA8
- TLSH T1AA764B2272E10466D1AE913ACF61463493E17C7E8FF2C3AB7004B6DA5E727C17A26717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory