General
- Target 2026-08-15_90a323bb4f0907b27943a382d06d7976_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 19.2MB
- Sample260815-bqeqdawemf
- SHA256 c897307599ef4465f605f5e4bf51371e3259c3163cd8c938a43830a6c33e2a5f
- MD5 90a323bb4f0907b27943a382d06d7976
- SHA1 819760c4eb26debbd6ace39b17fbdc7a2da75159
- SHA512 87f21c0536ab9ffb7f3634e56e989763776ffb110752a18c2dc9a98b0347e37ea5ce09a24ff427b3f16d326d11359a628a618bd4d2481572801a1c6673fd961c
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfC6FoMcIe:ERXMo5zqWYdyZ/K0ttYZTU9aZD
- TLSH T10F175903F293449AE0AAD138CA21863197613F6D8BF391EF755872D8EA376D33639711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_90a323bb4f0907b27943a382d06d7976_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_90a323bb4f0907b27943a382d06d7976_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 19.2MB
- SHA256 c897307599ef4465f605f5e4bf51371e3259c3163cd8c938a43830a6c33e2a5f
- MD5 90a323bb4f0907b27943a382d06d7976
- SHA1 819760c4eb26debbd6ace39b17fbdc7a2da75159
- SHA512 87f21c0536ab9ffb7f3634e56e989763776ffb110752a18c2dc9a98b0347e37ea5ce09a24ff427b3f16d326d11359a628a618bd4d2481572801a1c6673fd961c
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfC6FoMcIe:ERXMo5zqWYdyZ/K0ttYZTU9aZD
- TLSH T10F175903F293449AE0AAD138CA21863197613F6D8BF391EF755872D8EA376D33639711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory