General
- Target 2026-10-02_319e0e984a0fa4368ac7461a487375b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_vidar_wannacry
- Size 13.0MB
- Sample261003-sdl3cs1dld
- SHA256 3e3ee3022e2df12ef312e1fbc868ebc326f90a00a11df56ff862587965f60df2
- MD5 319e0e984a0fa4368ac7461a487375b4
- SHA1 54afbf437f27ac7dd53d5d4ca107cf827379132f
- SHA512 d54dc57c1a196b3ffae0a3496418f03f5a53a0e4194a4a649ba3e786aa77cd1e67feebd5359acc2e99e0a6a60892fc7006a3cd15b691daae39ca38dde8f5de88
- SSDEEP 98304:kqiR3TIOSAzLapIXfkZcGLapIwKUgTH2M2m9UMpu1QfLczqssnKSz:LitTf/cIvPGcIggTH2qBpu1QfLIqsufz
- TLSH T11CD6282231E58F99C05F9034CF16666597A33C5A8FF19BDB24407EA93E726E07A3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-02_319e0e984a0fa4368ac7461a487375b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_319e0e984a0fa4368ac7461a487375b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_319e0e984a0fa4368ac7461a487375b4_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_rhadamanthys_vidar_wannacry
- Size 13.0MB
- SHA256 3e3ee3022e2df12ef312e1fbc868ebc326f90a00a11df56ff862587965f60df2
- MD5 319e0e984a0fa4368ac7461a487375b4
- SHA1 54afbf437f27ac7dd53d5d4ca107cf827379132f
- SHA512 d54dc57c1a196b3ffae0a3496418f03f5a53a0e4194a4a649ba3e786aa77cd1e67feebd5359acc2e99e0a6a60892fc7006a3cd15b691daae39ca38dde8f5de88
- SSDEEP 98304:kqiR3TIOSAzLapIXfkZcGLapIwKUgTH2M2m9UMpu1QfLczqssnKSz:LitTf/cIvPGcIggTH2qBpu1QfLIqsufz
- TLSH T11CD6282231E58F99C05F9034CF16666597A33C5A8FF19BDB24407EA93E726E07A3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory