General
- Target 2026-08-01_20fbde281deea032b8df315be548a16d_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_stop_vidar_wannacry
- Size 17.7MB
- Sample260801-1zdl4syvbv
- SHA256 db2f58227f4fdd80f4ba8af8847ebbffcf5cb003fb36ca4840fb694a89b5756b
- MD5 20fbde281deea032b8df315be548a16d
- SHA1 e798783830de4d91c3376d1ded1e19edf55643f4
- SHA512 eb67c18c82970aea937268852481be6983404cafb7cb888273d0c6fd41519cc22948648eb472aae91f6181b28c703e10dcd34b1a164f10b465b625741bb8de19
- SSDEEP 393216:qaGbIfPR7yZ/K0ttYZTrExpgTHNBpu1Qfc0W:qaGiRyZ/K0ttYZTrExpaHNBpu1Qfc0W
- TLSH T1BF175A1272E54AA8D06FD034CE6256719B633C568FB19BDF25407EA83E726E07E3431B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-01_20fbde281deea032b8df315be548a16d_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_20fbde281deea032b8df315be548a16d_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackl.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_20fbde281deea032b8df315be548a16d_akira_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_stop_vidar_wannacry
- Size 17.7MB
- SHA256 db2f58227f4fdd80f4ba8af8847ebbffcf5cb003fb36ca4840fb694a89b5756b
- MD5 20fbde281deea032b8df315be548a16d
- SHA1 e798783830de4d91c3376d1ded1e19edf55643f4
- SHA512 eb67c18c82970aea937268852481be6983404cafb7cb888273d0c6fd41519cc22948648eb472aae91f6181b28c703e10dcd34b1a164f10b465b625741bb8de19
- SSDEEP 393216:qaGbIfPR7yZ/K0ttYZTrExpgTHNBpu1Qfc0W:qaGiRyZ/K0ttYZTrExpaHNBpu1Qfc0W
- TLSH T1BF175A1272E54AA8D06FD034CE6256719B633C568FB19BDF25407EA83E726E07E3431B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory