General
- Target 2026-08-21_c023d614dcd924aa7a3a971347e1eb84_akira_cobalt-strike_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_vidar
- Size 22.2MB
- Sample260821-bxhevazfla
- SHA256 afc35a07b67a03c51df0f1728a7b3db477a33d284b1a7fe473375c11caa83dae
- MD5 c023d614dcd924aa7a3a971347e1eb84
- SHA1 239d28ea47ca8b59814cf1399fba4454278f45a2
- SHA512 c190eb368da188c8240638382340db4c53654613001b974a3f137f9972bd08db972180a1f3d979b365fd83af2d061ac3b1e31add7362fb174e9ab7fc2abf2895
- SSDEEP 196608:H9Q57ekH1iWfx1QnEsmYot9ni0K+K326zpBhToz8MHNVqjy:q19fxiEsA9T439hToz2y
- TLSH T1E4378D16F38412EDD0678AF08BE38775DA327D122A21895F16E4FD095F33A905E3E3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_c023d614dcd924aa7a3a971347e1eb84_akira_cobalt-strike_darkgate_elex_gcleaner_glassworm_ice.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_c023d614dcd924aa7a3a971347e1eb84_akira_cobalt-strike_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_vidar
- Size 22.2MB
- SHA256 afc35a07b67a03c51df0f1728a7b3db477a33d284b1a7fe473375c11caa83dae
- MD5 c023d614dcd924aa7a3a971347e1eb84
- SHA1 239d28ea47ca8b59814cf1399fba4454278f45a2
- SHA512 c190eb368da188c8240638382340db4c53654613001b974a3f137f9972bd08db972180a1f3d979b365fd83af2d061ac3b1e31add7362fb174e9ab7fc2abf2895
- SSDEEP 196608:H9Q57ekH1iWfx1QnEsmYot9ni0K+K326zpBhToz8MHNVqjy:q19fxiEsA9T439hToz2y
- TLSH T1E4378D16F38412EDD0678AF08BE38775DA327D122A21895F16E4FD095F33A905E3E3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL