General
- Target 2026-08-13_e42d7e39dd4c0d369c89db6717831142_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.8MB
- Sample260813-dkj41sal3y
- SHA256 ceeed70363a3d5bfc888d5c086c0690ba71e8c2c041b6b19aacc4ab8d566ade8
- MD5 e42d7e39dd4c0d369c89db6717831142
- SHA1 045234d85c8117f206c7f279353c35334f779567
- SHA512 241a5742055445ae146bd600c3c20a88eaeeb82777a2ace13013f8ff5cf4701d2962aed269cdb34613ae8fe76df1dedc65ca74bff1ecd6490eb4c0ee245f256d
- SSDEEP 98304:vak1LapI/TIOSAwKUgTH2M2m9UMpu1QfLczqssnKSA:vD1cI/Tf8gTH2qBpu1QfLIqsufA
- TLSH T175B6492222D58F9DC05F9038CE1669B157637C5A8FB19BDF28407DA93E726E06E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_e42d7e39dd4c0d369c89db6717831142_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_e42d7e39dd4c0d369c89db6717831142_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.8MB
- SHA256 ceeed70363a3d5bfc888d5c086c0690ba71e8c2c041b6b19aacc4ab8d566ade8
- MD5 e42d7e39dd4c0d369c89db6717831142
- SHA1 045234d85c8117f206c7f279353c35334f779567
- SHA512 241a5742055445ae146bd600c3c20a88eaeeb82777a2ace13013f8ff5cf4701d2962aed269cdb34613ae8fe76df1dedc65ca74bff1ecd6490eb4c0ee245f256d
- SSDEEP 98304:vak1LapI/TIOSAwKUgTH2M2m9UMpu1QfLczqssnKSA:vD1cI/Tf8gTH2qBpu1QfLIqsufA
- TLSH T175B6492222D58F9DC05F9038CE1669B157637C5A8FB19BDF28407DA93E726E06E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory