General
- Target 2026-08-12_ebed587b8d8ee8d519a279b17268e890_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 25.2MB
- Sample260812-3v9vvsfd55
- SHA256 c929d6fe61c2c7b2b063f0511838eb8fe2fcd2bab457e0fb9e3d524d4069506a
- MD5 ebed587b8d8ee8d519a279b17268e890
- SHA1 9c7d2f23434d1801caa0598ad45b713da8335804
- SHA512 b60e700c98ea548b6aa50f54850767cdaa0aa65a1e883a9f2f8e72ec47f02ae42964321336dec5fac03c0b421d5b04e84ece7a8e72003d733eb96f98d97b4a09
- SSDEEP 786432:ERXMo5UkIY092b9HNBpu1Qfc0MHNBpu1Qfc0h:ERXMo5UkDYFYA
- TLSH T1A6474912A2978F9DC05F9434CD0665A156233F5A8F735BEF68447D28FA362A36E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_ebed587b8d8ee8d519a279b17268e890_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_ebed587b8d8ee8d519a279b17268e890_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 25.2MB
- SHA256 c929d6fe61c2c7b2b063f0511838eb8fe2fcd2bab457e0fb9e3d524d4069506a
- MD5 ebed587b8d8ee8d519a279b17268e890
- SHA1 9c7d2f23434d1801caa0598ad45b713da8335804
- SHA512 b60e700c98ea548b6aa50f54850767cdaa0aa65a1e883a9f2f8e72ec47f02ae42964321336dec5fac03c0b421d5b04e84ece7a8e72003d733eb96f98d97b4a09
- SSDEEP 786432:ERXMo5UkIY092b9HNBpu1Qfc0MHNBpu1Qfc0h:ERXMo5UkDYFYA
- TLSH T1A6474912A2978F9DC05F9434CD0665A156233F5A8F735BEF68447D28FA362A36E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory