General
- Target 2026-09-10_dffd8e81a622a3679183f060973f1f87_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 9.5MB
- Sample260910-lpxjxaap2y
- SHA256 7055ae005dade99a2ea85d0b26741efb1fbeb7eeb0ef7291d5e2165893cd08e0
- MD5 dffd8e81a622a3679183f060973f1f87
- SHA1 f2a86de2357210861d9b6933342f513c6f89274f
- SHA512 c0ea550d8e89ad5d624d791d64411695af30c8f1fca90b83a553543ad8abde3de41cb1eb917fa6a5d3f697cd66ebd431b3aaf2da38134be55a0440e735113e28
- SSDEEP 98304:5YUgTH2M2m9UMpu1QfLczqssnKSrTIOSA44kRAuFkkmP:5/gTH2qBpu1QfLIqsufrTf7uFXmP
- TLSH T1C2A64A2222D98FADD05FA438CD1669B556237C568F619FCF28807E293E716E09F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_dffd8e81a622a3679183f060973f1f87_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_dffd8e81a622a3679183f060973f1f87_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_dffd8e81a622a3679183f060973f1f87_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 9.5MB
- SHA256 7055ae005dade99a2ea85d0b26741efb1fbeb7eeb0ef7291d5e2165893cd08e0
- MD5 dffd8e81a622a3679183f060973f1f87
- SHA1 f2a86de2357210861d9b6933342f513c6f89274f
- SHA512 c0ea550d8e89ad5d624d791d64411695af30c8f1fca90b83a553543ad8abde3de41cb1eb917fa6a5d3f697cd66ebd431b3aaf2da38134be55a0440e735113e28
- SSDEEP 98304:5YUgTH2M2m9UMpu1QfLczqssnKSrTIOSA44kRAuFkkmP:5/gTH2qBpu1QfLIqsufrTf7uFXmP
- TLSH T1C2A64A2222D98FADD05FA438CD1669B556237C568F619FCF28807E293E716E09F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application