General
- Target 2026-08-15_c031a5cddf55c71b9dac21f958e31eac_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 16.6MB
- Sample260815-bjcmfacp3y
- SHA256 c63a09da0144f2b612716bbfb9cf7c9de36443878728d9fbc2e211edb7980d85
- MD5 c031a5cddf55c71b9dac21f958e31eac
- SHA1 e17a83607a3821c4f7ff87d4d13046a001c4748d
- SHA512 7ed096d4929e5f1a44b1cedb2f61a12ccb79ea305a6d250be98be36d2be5886faadf5e0c7d233b0f747154ca578b80e835b88367fe452ac006c0f98f95d0a88b
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTf4:ERXMo5zqWYdyZ/K0ttYZTUg
- TLSH T13A075903F293849AE1A9D138C921863197313F6D87F391EF795872D8EA366D33639B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_c031a5cddf55c71b9dac21f958e31eac_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_c031a5cddf55c71b9dac21f958e31eac_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 16.6MB
- SHA256 c63a09da0144f2b612716bbfb9cf7c9de36443878728d9fbc2e211edb7980d85
- MD5 c031a5cddf55c71b9dac21f958e31eac
- SHA1 e17a83607a3821c4f7ff87d4d13046a001c4748d
- SHA512 7ed096d4929e5f1a44b1cedb2f61a12ccb79ea305a6d250be98be36d2be5886faadf5e0c7d233b0f747154ca578b80e835b88367fe452ac006c0f98f95d0a88b
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTf4:ERXMo5zqWYdyZ/K0ttYZTUg
- TLSH T13A075903F293849AE1A9D138C921863197313F6D87F391EF795872D8EA366D33639B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory