General
- Target 2026-08-02_fcb1a0cb269d50012d66adc8359e452f_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 10.3MB
- Sample260802-thhq6swdqa
- SHA256 e2087f149eec5a13020c986f8dcefdf426a32b7cb63c14b56f91a89f4306b64b
- MD5 fcb1a0cb269d50012d66adc8359e452f
- SHA1 45f08f19da4cbb11bc8e2154b5fc1bf7a6e9dd92
- SHA512 c4844d86e7495b48a00b18e6e428904c7ec1240d2cb57438c99bf65e19505770eb0d2f32e855f4a6433102b0ff7168b37bd58095e825a9c6f41657b7d801ea85
- SSDEEP 98304:Z3qqUHxqPF4VMNFjouLapIufkZc1fkZc44TIOSAs:ZaHxXM/oucI4PxP44Tfw
- TLSH T153B64902F2A38517E1A5D139CA618635A3713F6D8BF385DBB81CB2C8AA372D37535712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_fcb1a0cb269d50012d66adc8359e452f_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_fcb1a0cb269d50012d66adc8359e452f_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 10.3MB
- SHA256 e2087f149eec5a13020c986f8dcefdf426a32b7cb63c14b56f91a89f4306b64b
- MD5 fcb1a0cb269d50012d66adc8359e452f
- SHA1 45f08f19da4cbb11bc8e2154b5fc1bf7a6e9dd92
- SHA512 c4844d86e7495b48a00b18e6e428904c7ec1240d2cb57438c99bf65e19505770eb0d2f32e855f4a6433102b0ff7168b37bd58095e825a9c6f41657b7d801ea85
- SSDEEP 98304:Z3qqUHxqPF4VMNFjouLapIufkZc1fkZc44TIOSAs:ZaHxXM/oucI4PxP44Tfw
- TLSH T153B64902F2A38517E1A5D139CA618635A3713F6D8BF385DBB81CB2C8AA372D37535712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory