General
- Target 2026-08-04_d71ac53032fc8f162c5aa03b78e98d00_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 9.3MB
- Sample260804-149kca1frh
- SHA256 ccf41539fac8aeae081d6660d56e4cec826434dff645fc1b0b9defb2d6dbeecb
- MD5 d71ac53032fc8f162c5aa03b78e98d00
- SHA1 e367e7119b19469b6e65d847186da7aac8454f10
- SHA512 34526efd28346c36e482f3085faf614977628376dac2bf838d73c5ae18d43af2a227cf42555d19168b5fedb9a7def357b2c262fcb6172e70bec82cbf06caaa30
- SSDEEP 49152:K8MKzq+9MIQkETwgjI45TMwwapIgTGpYqMgjI45TMwwapIgTtT3S9tsgX8zEC8UI:vak1LapIJ6FLapIyTIOSAoLapIkjol
- TLSH T1D1A63A2272F10466D1AE913ACF61463597E13C7E8FF2C3AB7104B2D91E726C17A2A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_d71ac53032fc8f162c5aa03b78e98d00_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d71ac53032fc8f162c5aa03b78e98d00_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 9.3MB
- SHA256 ccf41539fac8aeae081d6660d56e4cec826434dff645fc1b0b9defb2d6dbeecb
- MD5 d71ac53032fc8f162c5aa03b78e98d00
- SHA1 e367e7119b19469b6e65d847186da7aac8454f10
- SHA512 34526efd28346c36e482f3085faf614977628376dac2bf838d73c5ae18d43af2a227cf42555d19168b5fedb9a7def357b2c262fcb6172e70bec82cbf06caaa30
- SSDEEP 49152:K8MKzq+9MIQkETwgjI45TMwwapIgTGpYqMgjI45TMwwapIgTtT3S9tsgX8zEC8UI:vak1LapIJ6FLapIyTIOSAoLapIkjol
- TLSH T1D1A63A2272F10466D1AE913ACF61463597E13C7E8FF2C3AB7104B2D91E726C17A2A717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory