General
- Target 2026-08-02_d14a503771f574392dc20f7df432b588_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 23.1MB
- Sample260803-dm86xsbd39
- SHA256 5a1b43dc0f10266f5948dca4eafa85f71fad5087e2002df4e9e112a5ec455aa1
- MD5 d14a503771f574392dc20f7df432b588
- SHA1 dde9d05fa1dbad91b69ece4f35633b550ee19af7
- SHA512 d4f4436eeabc87800eaf5deb24a93377418867034cdc98c24fc99c792b84895cc03882f298a4ab9dac07e58cf0804c4dd039acfc7ea42ffb25c5b5a9895dfbcc
- SSDEEP 393216:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0XyZ/K0ttYZTz:ERXMzXdyZ/K0trFC4QReHNBpu1Qfc0Xj
- TLSH T10C377D12F1E44AA9D06FD078CE525665EA323C454FB09BDF1544BEA83E376E06B3831B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_d14a503771f574392dc20f7df432b588_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d14a503771f574392dc20f7df432b588_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 23.1MB
- SHA256 5a1b43dc0f10266f5948dca4eafa85f71fad5087e2002df4e9e112a5ec455aa1
- MD5 d14a503771f574392dc20f7df432b588
- SHA1 dde9d05fa1dbad91b69ece4f35633b550ee19af7
- SHA512 d4f4436eeabc87800eaf5deb24a93377418867034cdc98c24fc99c792b84895cc03882f298a4ab9dac07e58cf0804c4dd039acfc7ea42ffb25c5b5a9895dfbcc
- SSDEEP 393216:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0XyZ/K0ttYZTz:ERXMzXdyZ/K0trFC4QReHNBpu1Qfc0Xj
- TLSH T10C377D12F1E44AA9D06FD078CE525665EA323C454FB09BDF1544BEA83E376E06B3831B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Drops file in System32 directory