General
- Target 2026-08-05_e2e1a0f7b91aa3456677f8bb532ed323_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 10.1MB
- Sample260805-vrl1maxvcx
- SHA256 b9eb8fecdfa51d8d7d6ed9f9b52b91eb3bb1e8f383afac2a48a55809c959d633
- MD5 e2e1a0f7b91aa3456677f8bb532ed323
- SHA1 5b9adaba7a0d4da8564988ad0c556599cc6e56ec
- SHA512 a13f90bf73837112c62d133565aa44af747409133e905bf3fe7da47195b9360da7db70c0668458fd3c0751c86d22ad47e45996ad1910a380d3d98b019746e55d
- SSDEEP 49152:9TAnMpYq7VBXdceWNNx3K7U6qPC8BVs7PM3V3UKCOX6EF83m2jKHXyoYM2Tl6+15:9TAnM66deIo6qzBPxNSslf9TIOSAM
- TLSH T1DEB63919BAD88FA9C05FD038C95226B956237C568F319FCF1840BE297972FA05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_e2e1a0f7b91aa3456677f8bb532ed323_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e2e1a0f7b91aa3456677f8bb532ed323_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 10.1MB
- SHA256 b9eb8fecdfa51d8d7d6ed9f9b52b91eb3bb1e8f383afac2a48a55809c959d633
- MD5 e2e1a0f7b91aa3456677f8bb532ed323
- SHA1 5b9adaba7a0d4da8564988ad0c556599cc6e56ec
- SHA512 a13f90bf73837112c62d133565aa44af747409133e905bf3fe7da47195b9360da7db70c0668458fd3c0751c86d22ad47e45996ad1910a380d3d98b019746e55d
- SSDEEP 49152:9TAnMpYq7VBXdceWNNx3K7U6qPC8BVs7PM3V3UKCOX6EF83m2jKHXyoYM2Tl6+15:9TAnM66deIo6qzBPxNSslf9TIOSAM
- TLSH T1DEB63919BAD88FA9C05FD038C95226B956237C568F319FCF1840BE297972FA05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory