General
- Target 2026-08-07_dd65316209ad4d2aab3027b63d9a490d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_stop_vidar
- Size 12.7MB
- Sample260808-awj2lsweqf
- SHA256 fc06a52418f50d496bc8484cf03f6df581f45dcf083ed25cab35267bb9310c00
- MD5 dd65316209ad4d2aab3027b63d9a490d
- SHA1 c481ff78b9af4c5bdc8b5e5a8462fe2518dc7d2b
- SHA512 2a95420f8b7c16db44d74aec07b056b26b96bafe36077e82a52d0e5c01b28443fd39df6bc408831fcf25ff3959cb9a774da85d538adaa9ebfb225b4322f07388
- SSDEEP 98304:7fkZcAjkolXXu/3NETIOSAuKUgTH2M2m9UMpu1QfLczqssnKSgfkZc9:zPekwe1ETf6gTH2qBpu1QfLIqsuf+P9
- TLSH T13ED6391262D8CFEAD06F9074CD567AB566223C558F218FCB2D40BE293D317E15A3622F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_dd65316209ad4d2aab3027b63d9a490d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_dd65316209ad4d2aab3027b63d9a490d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_dd65316209ad4d2aab3027b63d9a490d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_stop_vidar
- Size 12.7MB
- SHA256 fc06a52418f50d496bc8484cf03f6df581f45dcf083ed25cab35267bb9310c00
- MD5 dd65316209ad4d2aab3027b63d9a490d
- SHA1 c481ff78b9af4c5bdc8b5e5a8462fe2518dc7d2b
- SHA512 2a95420f8b7c16db44d74aec07b056b26b96bafe36077e82a52d0e5c01b28443fd39df6bc408831fcf25ff3959cb9a774da85d538adaa9ebfb225b4322f07388
- SSDEEP 98304:7fkZcAjkolXXu/3NETIOSAuKUgTH2M2m9UMpu1QfLczqssnKSgfkZc9:zPekwe1ETf6gTH2qBpu1QfLIqsuf+P9
- TLSH T13ED6391262D8CFEAD06F9074CD567AB566223C558F218FCB2D40BE293D317E15A3622F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory