General
- Target 2026-08-21_652a5a16335116eb59dd2d02ef5f1ebf_akira_cloudeye_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.7MB
- Sample260822-q6f1psvdrb
- SHA256 55bd9fc066f189cadc42ce2d76e4bc38fab73e17cbda749adbc6b3ed5e201c2e
- MD5 652a5a16335116eb59dd2d02ef5f1ebf
- SHA1 415702cef64d83e8141b9b64a2e1d2d2c265f53f
- SHA512 64df4d6ca202b9f8807d6476d2077236dfd4ea9a08d77cf0c7bb27cf2c2c0305b93180f2cd3f960ac2183ed8bf2e5935b21e25c56a4ca939e5fad4c1dbb45b0b
- SSDEEP 98304:RHigTIOSAZKUgTH2M2m9UMpu1QfLczqssnKSY:0gTfbgTH2qBpu1QfLIqsufY
- TLSH T11F96391222D98FDDD05FA438CE1669B566237C5A8F219FDF2880BD293E716A05F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_652a5a16335116eb59dd2d02ef5f1ebf_akira_cloudeye_cobalt-strike_elex_glassworm_hijackloader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_652a5a16335116eb59dd2d02ef5f1ebf_akira_cloudeye_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.7MB
- SHA256 55bd9fc066f189cadc42ce2d76e4bc38fab73e17cbda749adbc6b3ed5e201c2e
- MD5 652a5a16335116eb59dd2d02ef5f1ebf
- SHA1 415702cef64d83e8141b9b64a2e1d2d2c265f53f
- SHA512 64df4d6ca202b9f8807d6476d2077236dfd4ea9a08d77cf0c7bb27cf2c2c0305b93180f2cd3f960ac2183ed8bf2e5935b21e25c56a4ca939e5fad4c1dbb45b0b
- SSDEEP 98304:RHigTIOSAZKUgTH2M2m9UMpu1QfLczqssnKSY:0gTfbgTH2qBpu1QfLIqsufY
- TLSH T11F96391222D98FDDD05FA438CE1669B566237C5A8F219FDF2880BD293E716A05F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory