General
- Target 2026-08-24_8e3c7aca7d498c359327de8ad81fbc38_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 6.5MB
- Sample260825-jpl23afm7y
- SHA256 91de1bdcb24b085c086ea2b3dcd9230c2a43f01a8958cd82e8cab5eab60fef42
- MD5 8e3c7aca7d498c359327de8ad81fbc38
- SHA1 416bcd20997021e3fab61b9467aea638e959127d
- SHA512 50c25b8233cd0ce6f1a21c45cf6e4eb809a8c900483a60164c2e08c7f2bdd87eccf489c840c9d7335f9f1c3d272ef7a89578ab99739c9efee1a429b73496a7c7
- SSDEEP 98304:OfkcsrRok8fkZcL/PvOAjcXvvOOc5bjoq:Sk2FPLHOAoXvvOXoq
- TLSH T1CE667D1EB77882B5D1B7C1B9C992D606F671B4018B3196CF2294875D2FB77E24E3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_8e3c7aca7d498c359327de8ad81fbc38_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hawke.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_8e3c7aca7d498c359327de8ad81fbc38_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 6.5MB
- SHA256 91de1bdcb24b085c086ea2b3dcd9230c2a43f01a8958cd82e8cab5eab60fef42
- MD5 8e3c7aca7d498c359327de8ad81fbc38
- SHA1 416bcd20997021e3fab61b9467aea638e959127d
- SHA512 50c25b8233cd0ce6f1a21c45cf6e4eb809a8c900483a60164c2e08c7f2bdd87eccf489c840c9d7335f9f1c3d272ef7a89578ab99739c9efee1a429b73496a7c7
- SSDEEP 98304:OfkcsrRok8fkZcL/PvOAjcXvvOOc5bjoq:Sk2FPLHOAoXvvOXoq
- TLSH T1CE667D1EB77882B5D1B7C1B9C992D606F671B4018B3196CF2294875D2FB77E24E3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory