General
- Target 2026-08-05_9b0a8ace6f81a31510390f5da8379a67_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.6MB
- Sample260805-hm4zes1djb
- SHA256 52752e1372c7466d67db1fe6f33eabe6a47d48dfa48f85f10ae58a30d92b8f70
- MD5 9b0a8ace6f81a31510390f5da8379a67
- SHA1 110028af2c61aa25d03bea2f9fb19571c34c849e
- SHA512 e4fc0bd8bc35e7bf8759c48de35fad946fd995aecffec1dd605c6c161bae9ca124e68950048bfb992e203fa224ebaa508144676e5cabfc8962a965dd3377b4d9
- SSDEEP 98304:yevoirV0t/iLwHft8vAjTIOSA2RTKUgTHTjop:BjrOOwH+vgTfCDgTH3op
- TLSH T134B6181222D98FACC05FD478CA5668B55A237C8A4F31AFDF1980BE253E756B05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-05_9b0a8ace6f81a31510390f5da8379a67_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_9b0a8ace6f81a31510390f5da8379a67_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_9b0a8ace6f81a31510390f5da8379a67_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.6MB
- SHA256 52752e1372c7466d67db1fe6f33eabe6a47d48dfa48f85f10ae58a30d92b8f70
- MD5 9b0a8ace6f81a31510390f5da8379a67
- SHA1 110028af2c61aa25d03bea2f9fb19571c34c849e
- SHA512 e4fc0bd8bc35e7bf8759c48de35fad946fd995aecffec1dd605c6c161bae9ca124e68950048bfb992e203fa224ebaa508144676e5cabfc8962a965dd3377b4d9
- SSDEEP 98304:yevoirV0t/iLwHft8vAjTIOSA2RTKUgTHTjop:BjrOOwH+vgTfCDgTH3op
- TLSH T134B6181222D98FACC05FD478CA5668B55A237C8A4F31AFDF1980BE253E756B05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Drops file in System32 directory