General
- Target 2026-09-26_66fdd7dfd96f6a987e19f056fa9d3b01_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 9.3MB
- Sample260926-1c1hcssake
- SHA256 70737a7f61344893e2503957ffe85377ad0a27d9bd18012a3e68028b2ea41e0c
- MD5 66fdd7dfd96f6a987e19f056fa9d3b01
- SHA1 98ce49c88a9979046cfdb0ba511f20a206452ece
- SHA512 97c5a2b3e00dfa004db78ab00a0eb4ce76c0d64f876117dc3810bd2316fd485a83f078e892290643da21e1912cba7abf7e1c6c644c8c6267e04c11579c0d0849
- SSDEEP 98304:5ZKUgTH2M2m9UMpu1QfLczqssnKSsuw6QTIOSAA:5PgTH2qBpu1QfLIqsufsz1TfU
- TLSH T1F8A6491222D98FEDD06FE438CD1669B566237C568F219FCF2840BD293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-26_66fdd7dfd96f6a987e19f056fa9d3b01_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_66fdd7dfd96f6a987e19f056fa9d3b01_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_66fdd7dfd96f6a987e19f056fa9d3b01_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 9.3MB
- SHA256 70737a7f61344893e2503957ffe85377ad0a27d9bd18012a3e68028b2ea41e0c
- MD5 66fdd7dfd96f6a987e19f056fa9d3b01
- SHA1 98ce49c88a9979046cfdb0ba511f20a206452ece
- SHA512 97c5a2b3e00dfa004db78ab00a0eb4ce76c0d64f876117dc3810bd2316fd485a83f078e892290643da21e1912cba7abf7e1c6c644c8c6267e04c11579c0d0849
- SSDEEP 98304:5ZKUgTH2M2m9UMpu1QfLczqssnKSsuw6QTIOSAA:5PgTH2qBpu1QfLIqsufsz1TfU
- TLSH T1F8A6491222D98FEDD06FE438CD1669B566237C568F219FCF2840BD293E726A05E3521F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1