General
- Target 2026-08-02_16a00f2346c7f2537fe1d745e1264706_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.4MB
- Sample260803-dzdwjsbn81
- SHA256 e48bf555c29c7fe24f79a5d0cd3fca06f3279afc7fb6c8fed1064756eee3a30b
- MD5 16a00f2346c7f2537fe1d745e1264706
- SHA1 912577e8af7309d8a0c01a5d4adacebea1f8128f
- SHA512 bcff0e1591e6df516a93e5c7d8588ee24cd772f1bb9ffc75ce940334f06d91272f928e47e353b337baf04f890e1948ca3324383cc48b03ad5bd4d3f89e8db216
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2tf:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0a
- TLSH T1D8176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_16a00f2346c7f2537fe1d745e1264706_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_16a00f2346c7f2537fe1d745e1264706_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 19.4MB
- SHA256 e48bf555c29c7fe24f79a5d0cd3fca06f3279afc7fb6c8fed1064756eee3a30b
- MD5 16a00f2346c7f2537fe1d745e1264706
- SHA1 912577e8af7309d8a0c01a5d4adacebea1f8128f
- SHA512 bcff0e1591e6df516a93e5c7d8588ee24cd772f1bb9ffc75ce940334f06d91272f928e47e353b337baf04f890e1948ca3324383cc48b03ad5bd4d3f89e8db216
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2tf:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0a
- TLSH T1D8176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory