General
- Target 2026-08-03_8c3cc733091b9823d48a878ec2348777_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.1MB
- Sample260803-v4knbsda29
- SHA256 c6f303421b6f653adcdaeb39cee68f88b5aa15b1ca7d49a36400188fcc470b80
- MD5 8c3cc733091b9823d48a878ec2348777
- SHA1 63256835f36fb27872277721ba8f5cb15f6c571f
- SHA512 4809caa092403521e6e7bb43aa9312a8807b7a461c3958f2e4fb89109aa416d941e750cfdb2b22c1686c64e6a82233678adb515be548bbabe51ba440a62b07b8
- SSDEEP 98304:yevoirV0t/iLwHft8vAjTIOSA2RTKUgTHb:BjrOOwH+vgTfCDgTHb
- TLSH T180B6181222D99FACC05FD478CA5668B55A237C8A8F31AFDF1940BE253A756B05F3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8c3cc733091b9823d48a878ec2348777_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8c3cc733091b9823d48a878ec2348777_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8c3cc733091b9823d48a878ec2348777_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.1MB
- SHA256 c6f303421b6f653adcdaeb39cee68f88b5aa15b1ca7d49a36400188fcc470b80
- MD5 8c3cc733091b9823d48a878ec2348777
- SHA1 63256835f36fb27872277721ba8f5cb15f6c571f
- SHA512 4809caa092403521e6e7bb43aa9312a8807b7a461c3958f2e4fb89109aa416d941e750cfdb2b22c1686c64e6a82233678adb515be548bbabe51ba440a62b07b8
- SSDEEP 98304:yevoirV0t/iLwHft8vAjTIOSA2RTKUgTHb:BjrOOwH+vgTfCDgTHb
- TLSH T180B6181222D99FACC05FD478CA5668B55A237C8A8F31AFDF1940BE253A756B05F3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory