General
- Target 2026-09-13_32f961df6ea09ff33be83131cdf74988_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.3MB
- Sample260913-tyzdvssth1
- SHA256 88bf036da399e60d615409943ead1f93d6ee2ff05cf7fa6d4946219498b02d99
- MD5 32f961df6ea09ff33be83131cdf74988
- SHA1 1cda0e1294c69c2fec577b6c26354c5410832ae9
- SHA512 52d061764f6f41b64e5190bf7c43afbbcac83d823833278d949b31f912a4e9458266919a9b671735b9d893cbc8242b7853067ffd1abb8cc62076b650bc2797f8
- SSDEEP 98304:5JUgTH2M2m9UMpu1QfLczqssnKS7XTIOSAKdNP0e/:5ygTH2qBpu1QfLIqsufrTfWdJ/
- TLSH T183A6491222D98FEDD06FA438CD1629B556237C568F319FCF2980BD293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_32f961df6ea09ff33be83131cdf74988_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_32f961df6ea09ff33be83131cdf74988_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_32f961df6ea09ff33be83131cdf74988_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 9.3MB
- SHA256 88bf036da399e60d615409943ead1f93d6ee2ff05cf7fa6d4946219498b02d99
- MD5 32f961df6ea09ff33be83131cdf74988
- SHA1 1cda0e1294c69c2fec577b6c26354c5410832ae9
- SHA512 52d061764f6f41b64e5190bf7c43afbbcac83d823833278d949b31f912a4e9458266919a9b671735b9d893cbc8242b7853067ffd1abb8cc62076b650bc2797f8
- SSDEEP 98304:5JUgTH2M2m9UMpu1QfLczqssnKS7XTIOSAKdNP0e/:5ygTH2qBpu1QfLIqsufrTfWdJ/
- TLSH T183A6491222D98FEDD06FA438CD1629B556237C568F319FCF2980BD293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application