General
- Target 2026-08-02_b67b2a5bf4e4c26bd27d51a2a4a1fd80_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.0MB
- Sample260803-dpsa7axeng
- SHA256 5f749e8e1ce5440030569d4266b4113e4339b226f3fd20ee988811ffea7f7bfc
- MD5 b67b2a5bf4e4c26bd27d51a2a4a1fd80
- SHA1 7315c4187b8d806c0de3d52e8a2de57a66950417
- SHA512 b9f3d5830b7f1c7acb6554b1d9b291289c2e77e12268bc9d77b6a9a751209426b4881654fd16f39155a473ee3de849944e23cf03a3d5730694a4a1fa5a336af1
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2rF:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0S
- TLSH T1E8176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_b67b2a5bf4e4c26bd27d51a2a4a1fd80_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b67b2a5bf4e4c26bd27d51a2a4a1fd80_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.0MB
- SHA256 5f749e8e1ce5440030569d4266b4113e4339b226f3fd20ee988811ffea7f7bfc
- MD5 b67b2a5bf4e4c26bd27d51a2a4a1fd80
- SHA1 7315c4187b8d806c0de3d52e8a2de57a66950417
- SHA512 b9f3d5830b7f1c7acb6554b1d9b291289c2e77e12268bc9d77b6a9a751209426b4881654fd16f39155a473ee3de849944e23cf03a3d5730694a4a1fa5a336af1
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2rF:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0S
- TLSH T1E8176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory