General
- Target 2026-09-13_8437796cf63d634884b278de461ad08d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.0MB
- Sample260913-qcln4atgrb
- SHA256 aed0cfb561c9392009a60f087457d502f36f70ccd61a0e624d535f8a999abb48
- MD5 8437796cf63d634884b278de461ad08d
- SHA1 721563bdf6cb902fd7bfc7011cdb31ded00485fd
- SHA512 0d600e2d3d08081772dfa1a2cc3afef039ea7fc0e4fb44459da38c9aeb3796e1996a777af3290ab22ab779a0c39bc2c52ebd2b9b3737ce51783756a84bc767f7
- SSDEEP 98304:5CUgTH2M2m9UMpu1QfLczqssnKS7TIOSAs3BdHV:5NgTH2qBpu1QfLIqsuf7TfA7HV
- TLSH T1DC96491222D98FADD0AFA438CD2669B556237C568F329FCF28807D293D717A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_8437796cf63d634884b278de461ad08d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_8437796cf63d634884b278de461ad08d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_8437796cf63d634884b278de461ad08d_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.0MB
- SHA256 aed0cfb561c9392009a60f087457d502f36f70ccd61a0e624d535f8a999abb48
- MD5 8437796cf63d634884b278de461ad08d
- SHA1 721563bdf6cb902fd7bfc7011cdb31ded00485fd
- SHA512 0d600e2d3d08081772dfa1a2cc3afef039ea7fc0e4fb44459da38c9aeb3796e1996a777af3290ab22ab779a0c39bc2c52ebd2b9b3737ce51783756a84bc767f7
- SSDEEP 98304:5CUgTH2M2m9UMpu1QfLczqssnKS7TIOSAs3BdHV:5NgTH2qBpu1QfLIqsuf7TfA7HV
- TLSH T1DC96491222D98FADD0AFA438CD2669B556237C568F329FCF28807D293D717A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
Detects executables packed with ASPack
Executes dropped EXE
Adds Run key to start application