General
- Target 2026-09-16_7eab73fa7e13cbeb5ca5eb2eddd156fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.3MB
- Sample260916-ng8nbazbmd
- SHA256 c93423ab9631f7eda48f9651b2790586dc165601e78039f96c45728b1d717522
- MD5 7eab73fa7e13cbeb5ca5eb2eddd156fd
- SHA1 527d80bb95ab2a348c5df2955361e63695542f8a
- SHA512 28da5e3e689f8d5f7a761dfdaf871d2b1faab9e6a954afd021d8c3e7b141281780090f978fae68c7e965aa003a3c0996a4b75318b5d3d51722c1afe13e0f562a
- SSDEEP 98304:5YKUgTH2M2m9UMpu1QfLczqssnKSs16zTIOSAl8:54gTH2qBpu1QfLIqsufs1mTf+
- TLSH T193A6491222D98FEDD06FE438CD1669B566237C568F219FCF2840BD293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_7eab73fa7e13cbeb5ca5eb2eddd156fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_7eab73fa7e13cbeb5ca5eb2eddd156fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_7eab73fa7e13cbeb5ca5eb2eddd156fd_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.3MB
- SHA256 c93423ab9631f7eda48f9651b2790586dc165601e78039f96c45728b1d717522
- MD5 7eab73fa7e13cbeb5ca5eb2eddd156fd
- SHA1 527d80bb95ab2a348c5df2955361e63695542f8a
- SHA512 28da5e3e689f8d5f7a761dfdaf871d2b1faab9e6a954afd021d8c3e7b141281780090f978fae68c7e965aa003a3c0996a4b75318b5d3d51722c1afe13e0f562a
- SSDEEP 98304:5YKUgTH2M2m9UMpu1QfLczqssnKSs16zTIOSAl8:54gTH2qBpu1QfLIqsufs1mTf+
- TLSH T193A6491222D98FEDD06FE438CD1669B566237C568F219FCF2840BD293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application