General
- Target 2026-08-01_203120d9c1069e0fd899fef022f19aff_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_vidar_wannacry
- Size 11.5MB
- Sample260801-rlht8sck7y
- SHA256 c802dc1e8252f99d2115ac5a44e8e79fad1c82e5ee6d2072498375fea262cf59
- MD5 203120d9c1069e0fd899fef022f19aff
- SHA1 c912e09fd11c97559f3b4e792b25678af270f337
- SHA512 d4aef97312b060c51bb82cba5df46c057816535afc293a6462e6927e2b061766e1b571d6adb1b0a666a2e8e938d0bac3f3dd4877115c89695dd42f49f62164f4
- SSDEEP 98304:vak1LapISKUgTH2M2m9UMpu1QfLczqssnKS9joLnTIOSAU:vD1cISgTH2qBpu1QfLIqsuf5o7TfA
- TLSH T1BDC6491232E58FA9C05F9034CE1265B597637C5A8FB19BDF28407DA93E726E06E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_203120d9c1069e0fd899fef022f19aff_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_203120d9c1069e0fd899fef022f19aff_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_vidar_wannacry
- Size 11.5MB
- SHA256 c802dc1e8252f99d2115ac5a44e8e79fad1c82e5ee6d2072498375fea262cf59
- MD5 203120d9c1069e0fd899fef022f19aff
- SHA1 c912e09fd11c97559f3b4e792b25678af270f337
- SHA512 d4aef97312b060c51bb82cba5df46c057816535afc293a6462e6927e2b061766e1b571d6adb1b0a666a2e8e938d0bac3f3dd4877115c89695dd42f49f62164f4
- SSDEEP 98304:vak1LapISKUgTH2M2m9UMpu1QfLczqssnKS9joLnTIOSAU:vD1cISgTH2qBpu1QfLIqsuf5o7TfA
- TLSH T1BDC6491232E58FA9C05F9034CE1265B597637C5A8FB19BDF28407DA93E726E06E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory