General
- Target 2026-08-07_be62d0119228d59ed22734bfc271499a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_stop_vidar
- Size 10.0MB
- Sample260808-a3k79aep81
- SHA256 215085ffad5cf55db45d2a6a746f63bb90788d4d928d894a90a8b7a3a1d9e3de
- MD5 be62d0119228d59ed22734bfc271499a
- SHA1 ed730b472bd66c788ee2b77954004cfbe696fff1
- SHA512 cda8ff213f02d17fcfa747dfe597916fe7fbb7fd99f2812d439e27ec7c2909882a721fa62153f51ab1b8063998e8b7b2d10d844110943d4f189858c6a470938e
- SSDEEP 98304:7fkZcX6zTIOSAXKUgTH2M2m9UMpu1QfLczqssnKSP:zPX6zTfZgTH2qBpu1QfLIqsufP
- TLSH T14DB64A1262E98FADD06FD038CD5669B566333C468F219FCF1940BE293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_be62d0119228d59ed22734bfc271499a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_be62d0119228d59ed22734bfc271499a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_be62d0119228d59ed22734bfc271499a_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_stop_vidar
- Size 10.0MB
- SHA256 215085ffad5cf55db45d2a6a746f63bb90788d4d928d894a90a8b7a3a1d9e3de
- MD5 be62d0119228d59ed22734bfc271499a
- SHA1 ed730b472bd66c788ee2b77954004cfbe696fff1
- SHA512 cda8ff213f02d17fcfa747dfe597916fe7fbb7fd99f2812d439e27ec7c2909882a721fa62153f51ab1b8063998e8b7b2d10d844110943d4f189858c6a470938e
- SSDEEP 98304:7fkZcX6zTIOSAXKUgTH2M2m9UMpu1QfLczqssnKSP:zPX6zTfZgTH2qBpu1QfLIqsufP
- TLSH T14DB64A1262E98FADD06FD038CD5669B566333C468F219FCF1940BE293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory