General
- Target 2026-08-24_d6b62961c0a2dde9fe112d97f7187fdd_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 20.7MB
- Sample260824-3m4nwavejd
- SHA256 27a808feae9c90780d2f81046806b38b4d6bf9d0f1195bcac9a843f8e9651f8f
- MD5 d6b62961c0a2dde9fe112d97f7187fdd
- SHA1 3d7fe55d0741395cc965d1f275c302e3d4e29ade
- SHA512 3ddb03cbc9a6d8916157d62f222d9f478c6a5148ca91135a3f34347cd0d20d596ae60af7bfd7cfc26dffe6e708a85e4733c05d14faafb076112162cec2d479e2
- SSDEEP 196608:WpAnjOyAdOrNTfgd7ozqdMcItozjrOOwH+v2gTH2qBpu1QfLIqsufr:sAntROVzjrOB+NTHNBpu1Qfc0r
- TLSH T1FC27491122D58FE9C05FD034CE4626B196237C5A8F719BDF2980BE693E726E06E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_d6b62961c0a2dde9fe112d97f7187fdd_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hija.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_d6b62961c0a2dde9fe112d97f7187fdd_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 20.7MB
- SHA256 27a808feae9c90780d2f81046806b38b4d6bf9d0f1195bcac9a843f8e9651f8f
- MD5 d6b62961c0a2dde9fe112d97f7187fdd
- SHA1 3d7fe55d0741395cc965d1f275c302e3d4e29ade
- SHA512 3ddb03cbc9a6d8916157d62f222d9f478c6a5148ca91135a3f34347cd0d20d596ae60af7bfd7cfc26dffe6e708a85e4733c05d14faafb076112162cec2d479e2
- SSDEEP 196608:WpAnjOyAdOrNTfgd7ozqdMcItozjrOOwH+v2gTH2qBpu1QfLIqsufr:sAntROVzjrOB+NTHNBpu1Qfc0r
- TLSH T1FC27491122D58FE9C05FD034CE4626B196237C5A8F719BDF2980BE693E726E06E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory