General
- Target 2026-08-10_50d28699f954d2f7b741ad6a5fd2fc8e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 8.5MB
- Sample260810-q667wsvyfy
- SHA256 2b8e5e46460f509f83b1cb16731eadb924748fcdad3b530605c15498228c4d99
- MD5 50d28699f954d2f7b741ad6a5fd2fc8e
- SHA1 614d90430759627ceceeb0b2bca5d95e3c9f4b13
- SHA512 53a15e4feee718cd75be2b8759f9a658ef2200dec490b7c851a99d43b1362e23cb05343862b2b0e99a53fc2063db0874f880b0ce5fcb2acc36fe35dc66e1aa35
- SSDEEP 49152:yZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4Ou:yevoirV0t/iLwHft8vAjTIMnUm8U1
- TLSH T1B896381232D98FE9C05FD074CA5625B65623BC9A8F319FCF18807E293A766E05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_50d28699f954d2f7b741ad6a5fd2fc8e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_50d28699f954d2f7b741ad6a5fd2fc8e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njra.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_50d28699f954d2f7b741ad6a5fd2fc8e_akira_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 8.5MB
- SHA256 2b8e5e46460f509f83b1cb16731eadb924748fcdad3b530605c15498228c4d99
- MD5 50d28699f954d2f7b741ad6a5fd2fc8e
- SHA1 614d90430759627ceceeb0b2bca5d95e3c9f4b13
- SHA512 53a15e4feee718cd75be2b8759f9a658ef2200dec490b7c851a99d43b1362e23cb05343862b2b0e99a53fc2063db0874f880b0ce5fcb2acc36fe35dc66e1aa35
- SSDEEP 49152:yZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4Ou:yevoirV0t/iLwHft8vAjTIMnUm8U1
- TLSH T1B896381232D98FE9C05FD074CA5625B65623BC9A8F319FCF18807E293A766E05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory