General
- Target 2026-08-06_bd0cc692ff884419053dc8da82882d22_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 11.3MB
- Sample260806-x2xk8ayfph
- SHA256 8cec0493b5a77519bb15516ec79ee6a9769c0f639fa28de551f08450b8fadaf4
- MD5 bd0cc692ff884419053dc8da82882d22
- SHA1 dc7c3ee019c331d2660c4695c7b9837692f810f9
- SHA512 4cf0dab6558f456214485652ffe76a39374518f0e64657d0af53cac7dfa646c9ce83f65f207e0f968f91f0e65d9fd44818db52385237d9ec09bf3df747b3d734
- SSDEEP 98304:kqiR3TIOSAzLapI1joEBevoirV0t/iLwHft8vAT:LitTf/cIBoESjrOOwH+v2
- TLSH T10AC64A1132E58FA9C05FD034CE5265B596637C5A8FB18BCF2840BE993E726E06E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-06_bd0cc692ff884419053dc8da82882d22_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_bd0cc692ff884419053dc8da82882d22_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_bd0cc692ff884419053dc8da82882d22_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 11.3MB
- SHA256 8cec0493b5a77519bb15516ec79ee6a9769c0f639fa28de551f08450b8fadaf4
- MD5 bd0cc692ff884419053dc8da82882d22
- SHA1 dc7c3ee019c331d2660c4695c7b9837692f810f9
- SHA512 4cf0dab6558f456214485652ffe76a39374518f0e64657d0af53cac7dfa646c9ce83f65f207e0f968f91f0e65d9fd44818db52385237d9ec09bf3df747b3d734
- SSDEEP 98304:kqiR3TIOSAzLapI1joEBevoirV0t/iLwHft8vAT:LitTf/cIBoESjrOOwH+v2
- TLSH T10AC64A1132E58FA9C05FD034CE5265B596637C5A8FB18BCF2840BE993E726E06E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory