General
- Target 2026-09-12_39a04f25577d9e73925fb19d9277124c_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.5MB
- Sample260913-dzvt3aee53
- SHA256 613ab41f2d66bfdc0aa276b403871ccade293d2a223ecb836dfa2f5d4cba7d57
- MD5 39a04f25577d9e73925fb19d9277124c
- SHA1 74a849d3043c6b3031331efb04ab661744970b7d
- SHA512 0c5c576f15050ce7e83aac964e873e78bba2417571a6b13173e24c3973358d377aae82f504ffca35e7384e20d2ff60085093f47d0cd5ac465e621172722d3ee9
- SSDEEP 98304:5mUgTH2M2m9UMpu1QfLczqssnKS7TIOSACVEO:5JgTH2qBpu1QfLIqsuf7TfGVl
- TLSH T11896491222D98FEDD05FA438CD1629B566237C5A8F219FDF2880BD293E756A05F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_39a04f25577d9e73925fb19d9277124c_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_n.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_39a04f25577d9e73925fb19d9277124c_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_n.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_39a04f25577d9e73925fb19d9277124c_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.5MB
- SHA256 613ab41f2d66bfdc0aa276b403871ccade293d2a223ecb836dfa2f5d4cba7d57
- MD5 39a04f25577d9e73925fb19d9277124c
- SHA1 74a849d3043c6b3031331efb04ab661744970b7d
- SHA512 0c5c576f15050ce7e83aac964e873e78bba2417571a6b13173e24c3973358d377aae82f504ffca35e7384e20d2ff60085093f47d0cd5ac465e621172722d3ee9
- SSDEEP 98304:5mUgTH2M2m9UMpu1QfLczqssnKS7TIOSACVEO:5JgTH2qBpu1QfLIqsuf7TfGVl
- TLSH T11896491222D98FEDD05FA438CD1629B566237C5A8F219FDF2880BD293E756A05F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application