General
- Target 2026-09-11_8bc15344d1cc1e716bb5dadc4f7ee6c5_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.0MB
- Sample260912-jnvykstyfx
- SHA256 7b0b2051eea0367470891de316562ce55ebe971864aea900c5c6ee688f165746
- MD5 8bc15344d1cc1e716bb5dadc4f7ee6c5
- SHA1 12885a779d574cb8717d88f84907943c99066fb8
- SHA512 1f6506bedb7145e36170e22a77189f4de4bded082c947b4e4ac623c729c70a58d71b572909e066f0791d6c4645e2cbf6dd907bc673bcfd9723473d408d633582
- SSDEEP 98304:5IUgTH2M2m9UMpu1QfLczqssnKS7TIOSA47m:5PgTH2qBpu1QfLIqsuf7Tfz
- TLSH T1C696491222E98F9DD06FA478CD1629B566237C568F219FDF2880BD293E717E05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-11_8bc15344d1cc1e716bb5dadc4f7ee6c5_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_l.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_8bc15344d1cc1e716bb5dadc4f7ee6c5_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_l.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_8bc15344d1cc1e716bb5dadc4f7ee6c5_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.0MB
- SHA256 7b0b2051eea0367470891de316562ce55ebe971864aea900c5c6ee688f165746
- MD5 8bc15344d1cc1e716bb5dadc4f7ee6c5
- SHA1 12885a779d574cb8717d88f84907943c99066fb8
- SHA512 1f6506bedb7145e36170e22a77189f4de4bded082c947b4e4ac623c729c70a58d71b572909e066f0791d6c4645e2cbf6dd907bc673bcfd9723473d408d633582
- SSDEEP 98304:5IUgTH2M2m9UMpu1QfLczqssnKS7TIOSA47m:5PgTH2qBpu1QfLIqsuf7Tfz
- TLSH T1C696491222E98F9DD06FA478CD1629B566237C568F219FDF2880BD293E717E05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application