General
- Target 2026-08-15_b207a0e741d75bcbef377adf353dae03_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 16.6MB
- Sample260815-bk9csswzcx
- SHA256 ae1f3dfdde5d32108dea5f3d90997817e8dffaf6a4c40eda870f4a7a8267ccc6
- MD5 b207a0e741d75bcbef377adf353dae03
- SHA1 5946c764d162cf9d47411c14a6a90e94894a25e2
- SHA512 a8235da23a254ccaf0d6e3b296ac815e7edd6de688e654e17b35dd7cdfec8ce39341d611c44dbd25ca979901c8222db6517b0a39a52c7ef203850306de5ed54f
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfQ:ERXMo5zqWYdyZ/K0ttYZTU4
- TLSH T16A075903F293849AE1A9D138C921863197313F6D87F391EF795872D8EA366D33639B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_b207a0e741d75bcbef377adf353dae03_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_b207a0e741d75bcbef377adf353dae03_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 16.6MB
- SHA256 ae1f3dfdde5d32108dea5f3d90997817e8dffaf6a4c40eda870f4a7a8267ccc6
- MD5 b207a0e741d75bcbef377adf353dae03
- SHA1 5946c764d162cf9d47411c14a6a90e94894a25e2
- SHA512 a8235da23a254ccaf0d6e3b296ac815e7edd6de688e654e17b35dd7cdfec8ce39341d611c44dbd25ca979901c8222db6517b0a39a52c7ef203850306de5ed54f
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfQ:ERXMo5zqWYdyZ/K0ttYZTU4
- TLSH T16A075903F293849AE1A9D138C921863197313F6D87F391EF795872D8EA366D33639B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory