General
- Target 2026-09-12_e1156f8983666c61dce1cd9e35f6ea80_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.0MB
- Sample260912-thg5msec72
- SHA256 018232d32c098f289d5931cd5622793e69ad82f4e11acc3c6cdff29dd98e94cb
- MD5 e1156f8983666c61dce1cd9e35f6ea80
- SHA1 a33e4aaa0285bdf4495f924cce26324cc517c52b
- SHA512 13bd17b05946ac93f5c46c8af41bd5103f0e1a35a661277f52e054ad5ee125272146390ed7d2edbdf5cfff1a0f62051be1d8746b2a87e1abe61e6bf38f868e55
- SSDEEP 98304:5CUgTH2M2m9UMpu1QfLczqssnKS7TIOSAs3BdHv:5NgTH2qBpu1QfLIqsuf7TfA7Hv
- TLSH T10A96491222D98FADD0AFA438CD2669B556237C568F329FCF28807D293D717A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_e1156f8983666c61dce1cd9e35f6ea80_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_e1156f8983666c61dce1cd9e35f6ea80_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e1156f8983666c61dce1cd9e35f6ea80_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.0MB
- SHA256 018232d32c098f289d5931cd5622793e69ad82f4e11acc3c6cdff29dd98e94cb
- MD5 e1156f8983666c61dce1cd9e35f6ea80
- SHA1 a33e4aaa0285bdf4495f924cce26324cc517c52b
- SHA512 13bd17b05946ac93f5c46c8af41bd5103f0e1a35a661277f52e054ad5ee125272146390ed7d2edbdf5cfff1a0f62051be1d8746b2a87e1abe61e6bf38f868e55
- SSDEEP 98304:5CUgTH2M2m9UMpu1QfLczqssnKS7TIOSAs3BdHv:5NgTH2qBpu1QfLIqsuf7TfA7Hv
- TLSH T10A96491222D98FADD0AFA438CD2669B556237C568F329FCF28807D293D717A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application