General

  • Target
    2026-09-11_8bc15344d1cc1e716bb5dadc4f7ee6c5_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
  • Size 9.0MB
  • Sample260912-jnvykstyfx
  • SHA256 7b0b2051eea0367470891de316562ce55ebe971864aea900c5c6ee688f165746
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-11_8bc15344d1cc1e716bb5dadc4f7ee6c5_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
    • Size 9.0MB
    • SHA256 7b0b2051eea0367470891de316562ce55ebe971864aea900c5c6ee688f165746
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables containing URLs to raw contents of a Github gist

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks