General

  • Target
    2026-08-07_1aeea8f0971bdb1761e82ec0fa86af18_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_stop_vidar
  • Size 4.9MB
  • Sample260807-v7465sttg1
  • SHA256 e39a38aad8d0cc5e94a3104bd8c7ea6c8ff819c391a024e09da4e6100d7e0151
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-07_1aeea8f0971bdb1761e82ec0fa86af18_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_stop_vidar
    • Size 4.9MB
    • SHA256 e39a38aad8d0cc5e94a3104bd8c7ea6c8ff819c391a024e09da4e6100d7e0151
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects executables containing URLs to raw contents of a Github gist

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks