General
- Target 2026-10-02_ef5d248a49cedc8988ec3dd35cdada48_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar_wannacry
- Size 8.3MB
- Sample261002-2xcgpsvcqa
- SHA256 b930fba3f4d01b06367d9947d23cd71a1b3b2a17c63d9a7248758a5e9036bcbf
- MD5 ef5d248a49cedc8988ec3dd35cdada48
- SHA1 da028f82ad15ea49195258da4a94840410c99c01
- SHA512 b5ed4ff63ff9227c6339a1595c5e2498df45ce4b75606df851e2fca884b0502c9c7e12272b038b1018ec4d470523cf4a584e0ec3b15da382046617fcf53d5ffa
- SSDEEP 49152:kpEqJtb2I5RJ5T3S9tsgX8zEC8ULgCSA/Bkj0bgjI45TMwwapIgTMeW4SkZP4szX:kqiR3TIOSAzLapIXfkZcSTIOSAZ
- TLSH T1CA965C1272F44527E1AE923ECA714A3897B17C3A9FF2C78F7404B5DD1972782A526323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-02_ef5d248a49cedc8988ec3dd35cdada48_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_ef5d248a49cedc8988ec3dd35cdada48_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_ef5d248a49cedc8988ec3dd35cdada48_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar_wannacry
- Size 8.3MB
- SHA256 b930fba3f4d01b06367d9947d23cd71a1b3b2a17c63d9a7248758a5e9036bcbf
- MD5 ef5d248a49cedc8988ec3dd35cdada48
- SHA1 da028f82ad15ea49195258da4a94840410c99c01
- SHA512 b5ed4ff63ff9227c6339a1595c5e2498df45ce4b75606df851e2fca884b0502c9c7e12272b038b1018ec4d470523cf4a584e0ec3b15da382046617fcf53d5ffa
- SSDEEP 49152:kpEqJtb2I5RJ5T3S9tsgX8zEC8ULgCSA/Bkj0bgjI45TMwwapIgTMeW4SkZP4szX:kqiR3TIOSAzLapIXfkZcSTIOSAZ
- TLSH T1CA965C1272F44527E1AE923ECA714A3897B17C3A9FF2C78F7404B5DD1972782A526323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory