General
- Target 2026-08-08_83bff53cfaa729450a8f0b9768549900_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 23.1MB
- Sample260808-v8trsseg22
- SHA256 52ecb99d732bf30fc009a8a866e9a28381ba0b6bd4996d1a78393941fde6b2bc
- MD5 83bff53cfaa729450a8f0b9768549900
- SHA1 245271d49d12e8c8e1ff2c7733db6a8df38dbea2
- SHA512 ef23914eb8447f1268ef83801e393a25ad75fdbcf9d9423433ac8c90a212370487709af2407d5d86853e334d3b8528e199c8b5a983d8fc2d4692c1558b5c939b
- SSDEEP 196608:LitTf/cIBoEFdYKmd0RoocIWdyeGZF6bUpMBF1p/kjRm4OWi2bqjrOOwH+vB:8M9sqLVuIbUwF1VERmj2bqjrOB+Z
- TLSH T1B3379B1272E48AA9C05FC034CF42567597A23C5A8FF19BDB2540BED93E726E07A3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_83bff53cfaa729450a8f0b9768549900_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_83bff53cfaa729450a8f0b9768549900_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_83bff53cfaa729450a8f0b9768549900_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 23.1MB
- SHA256 52ecb99d732bf30fc009a8a866e9a28381ba0b6bd4996d1a78393941fde6b2bc
- MD5 83bff53cfaa729450a8f0b9768549900
- SHA1 245271d49d12e8c8e1ff2c7733db6a8df38dbea2
- SHA512 ef23914eb8447f1268ef83801e393a25ad75fdbcf9d9423433ac8c90a212370487709af2407d5d86853e334d3b8528e199c8b5a983d8fc2d4692c1558b5c939b
- SSDEEP 196608:LitTf/cIBoEFdYKmd0RoocIWdyeGZF6bUpMBF1p/kjRm4OWi2bqjrOOwH+vB:8M9sqLVuIbUwF1VERmj2bqjrOB+Z
- TLSH T1B3379B1272E48AA9C05FC034CF42567597A23C5A8FF19BDB2540BED93E726E07A3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory