General
- Target 2026-08-04_d23e03fac67901f936a1eb964656a6dc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.8MB
- Sample260805-ajtqaatepe
- SHA256 057f04f3badf94ff92bbccf2d6b48930e4686773e980e4f159eaeeea05d6e52f
- MD5 d23e03fac67901f936a1eb964656a6dc
- SHA1 7b0c5c03b2dc9d00815e716a91c3b38f5646ab12
- SHA512 106364943d2fded11800d2790897799caada563985b1b6c4df81904c7139e6e92f3f89a852ac1497471498bcdb83e0ec4e1d6c7e8a7b98af7f13c8853da1f76f
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2R:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0m
- TLSH T1EC176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_d23e03fac67901f936a1eb964656a6dc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d23e03fac67901f936a1eb964656a6dc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.8MB
- SHA256 057f04f3badf94ff92bbccf2d6b48930e4686773e980e4f159eaeeea05d6e52f
- MD5 d23e03fac67901f936a1eb964656a6dc
- SHA1 7b0c5c03b2dc9d00815e716a91c3b38f5646ab12
- SHA512 106364943d2fded11800d2790897799caada563985b1b6c4df81904c7139e6e92f3f89a852ac1497471498bcdb83e0ec4e1d6c7e8a7b98af7f13c8853da1f76f
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0tM6SohcIy6iMPYTfJ06jgTH2qBpu1QfLIqsuf2R:ERXMzXdyZ/K0trFC4QR8THNBpu1Qfc0m
- TLSH T1EC176C12F2E44BA9C06FD078CA426665EA733C454F709BCF5544BE683E376E06A3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory