General
- Target 2026-09-13_eb7b9358c344fc9b66fc809cad890fdc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.9MB
- Sample260913-kvafwsvdlf
- SHA256 2d1c2803adb48414a691a65d9b842b9b6fa3611e25592022b68dece8cf8b2318
- MD5 eb7b9358c344fc9b66fc809cad890fdc
- SHA1 257ac7a108c592eedd32b8bf9b517ede13aa9b4f
- SHA512 3a425a4fa881435fdcbb28ec08adb097c3115c1dde5cd51dc091419fb5112fa436d952bcd54a5cd30eaa7065cf1d22564abee1ad9fe8def3faba013b967e2be0
- SSDEEP 98304:5jUgTH2M2m9UMpu1QfLczqssnKSXdETIOSA3rOO53b:5YgTH2qBpu1QfLIqsufXdETfPD53b
- TLSH T1F796491222D98FEDD05FA438CD1629B566237C5A8F219FDF2980BD293E717A05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_eb7b9358c344fc9b66fc809cad890fdc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_eb7b9358c344fc9b66fc809cad890fdc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_eb7b9358c344fc9b66fc809cad890fdc_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.9MB
- SHA256 2d1c2803adb48414a691a65d9b842b9b6fa3611e25592022b68dece8cf8b2318
- MD5 eb7b9358c344fc9b66fc809cad890fdc
- SHA1 257ac7a108c592eedd32b8bf9b517ede13aa9b4f
- SHA512 3a425a4fa881435fdcbb28ec08adb097c3115c1dde5cd51dc091419fb5112fa436d952bcd54a5cd30eaa7065cf1d22564abee1ad9fe8def3faba013b967e2be0
- SSDEEP 98304:5jUgTH2M2m9UMpu1QfLczqssnKSXdETIOSA3rOO53b:5YgTH2qBpu1QfLIqsufXdETfPD53b
- TLSH T1F796491222D98FEDD05FA438CD1629B566237C5A8F219FDF2980BD293E717A05E3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application