General
- Target 2026-09-12_2d7ba2e8aef02e7b8ea9d980a9b7a0fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 8.5MB
- Sample260913-eww4ds1frf
- SHA256 ddabbaaaedd0ca8620f1cc8c778a39332fce57454093e9ebb4d993d8ac85a8e1
- MD5 2d7ba2e8aef02e7b8ea9d980a9b7a0fd
- SHA1 75f263a0f29479a0d4a87bc463398c77e01ece05
- SHA512 2ac209220ef355a9fb961f1517ec8098ae932a9f107253870049a7346bf62f7f4044dacf136a844d79c2fa2f3c5f250b2b19f985c3cabecdc1af1bd95d2281f9
- SSDEEP 98304:58UgTH2M2m9UMpu1QfLczqssnKS7TIOSAJP0eK:57gTH2qBpu1QfLIqsuf7TfpK
- TLSH T17696391222D98FEDD06FA438CD1669B556237C5A8F319FDF2880BD293E716A05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_2d7ba2e8aef02e7b8ea9d980a9b7a0fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_2d7ba2e8aef02e7b8ea9d980a9b7a0fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_2d7ba2e8aef02e7b8ea9d980a9b7a0fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 8.5MB
- SHA256 ddabbaaaedd0ca8620f1cc8c778a39332fce57454093e9ebb4d993d8ac85a8e1
- MD5 2d7ba2e8aef02e7b8ea9d980a9b7a0fd
- SHA1 75f263a0f29479a0d4a87bc463398c77e01ece05
- SHA512 2ac209220ef355a9fb961f1517ec8098ae932a9f107253870049a7346bf62f7f4044dacf136a844d79c2fa2f3c5f250b2b19f985c3cabecdc1af1bd95d2281f9
- SSDEEP 98304:58UgTH2M2m9UMpu1QfLczqssnKS7TIOSAJP0eK:57gTH2qBpu1QfLIqsuf7TfpK
- TLSH T17696391222D98FEDD06FA438CD1669B556237C5A8F319FDF2880BD293E716A05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application