General
- Target 2026-08-08_dee53bfd91f29d9e55294b3b53f05f08_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_vidar_wannacry
- Size 17.5MB
- Sample260808-vpl8lsvxfs
- SHA256 659c2f16e926d5166432457e92aebff36276e2a820942da32acf03e26cf61ff2
- MD5 dee53bfd91f29d9e55294b3b53f05f08
- SHA1 60e2d06b5df3b4da1d5c4efe7a165997e180d50f
- SHA512 f3b2ded210ffc81cb0d0206071c3146a018132f061d92786e268f05ab2f9f89c46f8bf150a524eedf07f7b09ad274f88ce67dde22f1f55cfd25599b9085cf72a
- SSDEEP 196608:LitTf/cIBoEFdYKmd0RoocIWdyeGZF6bUpMBF1p/kjRm4OWi2b88:8M9sqLVuIbUwF1VERmj2bD
- TLSH T1E207BE23B2E10566D16AD139CF618635D7B13C2A8BF1C2EB3144B6D92E737C17A3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_dee53bfd91f29d9e55294b3b53f05f08_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_dee53bfd91f29d9e55294b3b53f05f08_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_dee53bfd91f29d9e55294b3b53f05f08_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_vidar_wannacry
- Size 17.5MB
- SHA256 659c2f16e926d5166432457e92aebff36276e2a820942da32acf03e26cf61ff2
- MD5 dee53bfd91f29d9e55294b3b53f05f08
- SHA1 60e2d06b5df3b4da1d5c4efe7a165997e180d50f
- SHA512 f3b2ded210ffc81cb0d0206071c3146a018132f061d92786e268f05ab2f9f89c46f8bf150a524eedf07f7b09ad274f88ce67dde22f1f55cfd25599b9085cf72a
- SSDEEP 196608:LitTf/cIBoEFdYKmd0RoocIWdyeGZF6bUpMBF1p/kjRm4OWi2b88:8M9sqLVuIbUwF1VERmj2bD
- TLSH T1E207BE23B2E10566D16AD139CF618635D7B13C2A8BF1C2EB3144B6D92E737C17A3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory