General
- Target 2026-09-12_801dbb4c39b1eb6cd4188a1644c99c58_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 11.9MB
- Sample260912-2me5vabb97
- SHA256 787b56c918eb68272a0e6ae19e4954e39b808290ce199e2f274a41cb5d1049d1
- MD5 801dbb4c39b1eb6cd4188a1644c99c58
- SHA1 9a11a17f288581e5d74171165b19ece12a26d339
- SHA512 10c42a397998f578f1c9bc0d5d58d93eb6025cc3445aef0ba9e1b6645703b15b8e7ea90d1b3d17e9fc7c53e84dcde6ee221c0e5b8ad7a4eea68b98dbc7946c42
- SSDEEP 196608:5sgTH2qBpu1QfLIqsufSeGZF6bUpMBF1p/kjRm4OWi2bq:1THNBpu1Qfc0KIbUwF1VERmj2bq
- TLSH T1D9C68C1165DA9FDCC05FA474CE0669B16A237C868F61AFDF09807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_801dbb4c39b1eb6cd4188a1644c99c58_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_801dbb4c39b1eb6cd4188a1644c99c58_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_801dbb4c39b1eb6cd4188a1644c99c58_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 11.9MB
- SHA256 787b56c918eb68272a0e6ae19e4954e39b808290ce199e2f274a41cb5d1049d1
- MD5 801dbb4c39b1eb6cd4188a1644c99c58
- SHA1 9a11a17f288581e5d74171165b19ece12a26d339
- SHA512 10c42a397998f578f1c9bc0d5d58d93eb6025cc3445aef0ba9e1b6645703b15b8e7ea90d1b3d17e9fc7c53e84dcde6ee221c0e5b8ad7a4eea68b98dbc7946c42
- SSDEEP 196608:5sgTH2qBpu1QfLIqsufSeGZF6bUpMBF1p/kjRm4OWi2bq:1THNBpu1Qfc0KIbUwF1VERmj2bq
- TLSH T1D9C68C1165DA9FDCC05FA474CE0669B16A237C868F61AFDF09807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application