General
- Target 2026-08-06_2e51d9793f469873436f2a3457278674_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 16.5MB
- Sample260806-ylyc9aca63
- SHA256 af0da60da3f09e19b6dd373861101b4667b2cbbf1e2bf591c044923f58ba3058
- MD5 2e51d9793f469873436f2a3457278674
- SHA1 0c6f377bf5c068cec503cc8010e83d777d65f985
- SHA512 984f7f4a920304aa995645be476ca675abd115a29425e10dac3ddc0ebbc2f682837c8a94133c0dbd0f77d7a6da089dcc0c4c39a432c57d8b2871393427a13e7a
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0ttYVAATko79WyZ/K0ttYVAATnTfNoh:ERXMzXdyZ/K0ttYZTbMyZ/K0ttYZTTKh
- TLSH T1E9079E03F2E441A5E06AD279CA729635EB327C1A4BB195CF315472D81E77BE07B39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_2e51d9793f469873436f2a3457278674_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_2e51d9793f469873436f2a3457278674_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 16.5MB
- SHA256 af0da60da3f09e19b6dd373861101b4667b2cbbf1e2bf591c044923f58ba3058
- MD5 2e51d9793f469873436f2a3457278674
- SHA1 0c6f377bf5c068cec503cc8010e83d777d65f985
- SHA512 984f7f4a920304aa995645be476ca675abd115a29425e10dac3ddc0ebbc2f682837c8a94133c0dbd0f77d7a6da089dcc0c4c39a432c57d8b2871393427a13e7a
- SSDEEP 196608:ZaHxXME6A6CWyZ/K0ttYVAATko79WyZ/K0ttYVAATnTfNoh:ERXMzXdyZ/K0ttYZTbMyZ/K0ttYZTTKh
- TLSH T1E9079E03F2E441A5E06AD279CA729635EB327C1A4BB195CF315472D81E77BE07B39322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory