General
- Target 2026-08-15_596688ea0025fdc103f96814796693fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 19.2MB
- Sample260815-bwyensdb67
- SHA256 8234a9568289cbd60dea3ee0285b578363501da29430b405f27af79dd744160d
- MD5 596688ea0025fdc103f96814796693fd
- SHA1 a41b9e32738ef642343b2f01a443c3c12a94b979
- SHA512 fbef392bd21fe7fe755a9635831e48923c7d5d643a75b5cfde8bafc1436c7c6d6a4347528ac59a5dce39c925f24a6a7a4a49f23c4ed6639393429e64bfd0287d
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfC6FoMcIa:ERXMo5zqWYdyZ/K0ttYZTU9aZj
- TLSH T1E4175903F293449AE0AAD138CA21863197613F6D8BF391EF755872D8EA376D33639711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_596688ea0025fdc103f96814796693fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_596688ea0025fdc103f96814796693fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 19.2MB
- SHA256 8234a9568289cbd60dea3ee0285b578363501da29430b405f27af79dd744160d
- MD5 596688ea0025fdc103f96814796693fd
- SHA1 a41b9e32738ef642343b2f01a443c3c12a94b979
- SHA512 fbef392bd21fe7fe755a9635831e48923c7d5d643a75b5cfde8bafc1436c7c6d6a4347528ac59a5dce39c925f24a6a7a4a49f23c4ed6639393429e64bfd0287d
- SSDEEP 196608:ZaHxXMZ6+oEKmd00dFdUDX56CWyZ/K0ttYVAATYTfC6FoMcIa:ERXMo5zqWYdyZ/K0ttYZTU9aZj
- TLSH T1E4175903F293449AE0AAD138CA21863197613F6D8BF391EF755872D8EA376D33639711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory