General
- Target 2026-09-12_86ce177bfbeb8960fa98075fbb56bb4d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.0MB
- Sample260912-15ercsyvdt
- SHA256 2f32e5b96bdc12555c59fcac3eb9d5f97b3789122c46daacf940270c5b70cc74
- MD5 86ce177bfbeb8960fa98075fbb56bb4d
- SHA1 427593851f06bed7efe8988040a6666a23a230c2
- SHA512 f6836600aa38d63c7ee1701a1942ae08ec50aa372bc08e888a8a570e31cd58f9f2a5e1723ada16b6b3f0c863d9ceede85210fe88bc78b4e0c307a6b1ce83b623
- SSDEEP 98304:5CUgTH2M2m9UMpu1QfLczqssnKS7TIOSAs3BdHr:5NgTH2qBpu1QfLIqsuf7TfA7Hr
- TLSH T12596491222D98FADD0AFA438CD2669B556237C568F329FCF28807D293D717A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_86ce177bfbeb8960fa98075fbb56bb4d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_86ce177bfbeb8960fa98075fbb56bb4d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_86ce177bfbeb8960fa98075fbb56bb4d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.0MB
- SHA256 2f32e5b96bdc12555c59fcac3eb9d5f97b3789122c46daacf940270c5b70cc74
- MD5 86ce177bfbeb8960fa98075fbb56bb4d
- SHA1 427593851f06bed7efe8988040a6666a23a230c2
- SHA512 f6836600aa38d63c7ee1701a1942ae08ec50aa372bc08e888a8a570e31cd58f9f2a5e1723ada16b6b3f0c863d9ceede85210fe88bc78b4e0c307a6b1ce83b623
- SSDEEP 98304:5CUgTH2M2m9UMpu1QfLczqssnKS7TIOSAs3BdHr:5NgTH2qBpu1QfLIqsuf7TfA7Hr
- TLSH T12596491222D98FADD0AFA438CD2669B556237C568F329FCF28807D293D717A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application