General
- Target 2026-08-08_dd9d0f7c3bb7ef017f6019f9100b6295_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.0MB
- Sample260808-vpy76s1dqh
- SHA256 d488afe51eb7a91ab93c7db503a93cb36dab4cca251a23fd90acd463fb700e37
- MD5 dd9d0f7c3bb7ef017f6019f9100b6295
- SHA1 75eb6e2b0543b058ffed5ef7db7ef52245047a29
- SHA512 35e8ec093b46fe640cb6eec50bf8e7a15dfeaa15b6645741aabb8598bb55fba003c3114109fb9e143c241f7acdca248fc589add9e6164bd9c6441c918991bc54
- SSDEEP 49152:yZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4Oc:yevoirV0t/iLwHft8vAhTIOSAv
- TLSH T1AF863A1232D98FADC05FD478CA5619B656237C5A8F329BCF1480BE293EB57B04E3521B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_dd9d0f7c3bb7ef017f6019f9100b6295_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_dd9d0f7c3bb7ef017f6019f9100b6295_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_dd9d0f7c3bb7ef017f6019f9100b6295_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.0MB
- SHA256 d488afe51eb7a91ab93c7db503a93cb36dab4cca251a23fd90acd463fb700e37
- MD5 dd9d0f7c3bb7ef017f6019f9100b6295
- SHA1 75eb6e2b0543b058ffed5ef7db7ef52245047a29
- SHA512 35e8ec093b46fe640cb6eec50bf8e7a15dfeaa15b6645741aabb8598bb55fba003c3114109fb9e143c241f7acdca248fc589add9e6164bd9c6441c918991bc54
- SSDEEP 49152:yZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4Oc:yevoirV0t/iLwHft8vAhTIOSAv
- TLSH T1AF863A1232D98FADC05FD478CA5619B656237C5A8F329BCF1480BE293EB57B04E3521B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory