General
- Target 2026-09-10_3e96e2bb8a49a5fd596098987ad04535_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 15.7MB
- Sample260910-wdtc8atbpf
- SHA256 533f6328d6e444bf0087ed2e8ffa8e3290c3cb09b3f222415e5b60080d67dce4
- MD5 3e96e2bb8a49a5fd596098987ad04535
- SHA1 5f20c33380a98bd50345fe6dd5188a0ed1ae8c6b
- SHA512 2983eb6392497e5d6f2d14c40698be11a2229476acb11a9b8397ed4ef9aa1e2133bdb74e906abf51f8959c73af8528645af9f656a5fd49b480cbdb0b2c4fc432
- SSDEEP 196608:ggTH2qBpu1QfLIqsufH6HTfmheGZF6bUpMBF1p/kjRm4OWi2bM:rTHNBpu1Qfc0az8IbUwF1VERmj2bM
- TLSH T162F6AD1262D98FADD06FD038CD5269B5A6337C468F219FCF1940BE293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-10_3e96e2bb8a49a5fd596098987ad04535_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_3e96e2bb8a49a5fd596098987ad04535_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_3e96e2bb8a49a5fd596098987ad04535_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 15.7MB
- SHA256 533f6328d6e444bf0087ed2e8ffa8e3290c3cb09b3f222415e5b60080d67dce4
- MD5 3e96e2bb8a49a5fd596098987ad04535
- SHA1 5f20c33380a98bd50345fe6dd5188a0ed1ae8c6b
- SHA512 2983eb6392497e5d6f2d14c40698be11a2229476acb11a9b8397ed4ef9aa1e2133bdb74e906abf51f8959c73af8528645af9f656a5fd49b480cbdb0b2c4fc432
- SSDEEP 196608:ggTH2qBpu1QfLIqsufH6HTfmheGZF6bUpMBF1p/kjRm4OWi2bM:rTHNBpu1Qfc0az8IbUwF1VERmj2bM
- TLSH T162F6AD1262D98FADD06FD038CD5269B5A6337C468F219FCF1940BE293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application