General
- Target 2026-10-02_1d401a1fc307c316fdad39364a8cf98c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_stop_vidar
- Size 4.8MB
- Sample261003-tv3bcasdmc
- SHA256 6a409befc21696446e124fbed2e49812550f04d2fb99df02eacd8a5a3417b533
- MD5 1d401a1fc307c316fdad39364a8cf98c
- SHA1 8a228a1aade6594a6f6d94ec3fe2ca8f91421b05
- SHA512 f25555011df7fd0d343b1ffcebc836e3ff22d9c427d023220f7317c2dd9490273fb24a11c751c45cb91f16f9f88eb98092750ed925c2bd4baeb8996e90973c8c
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbvT3S9tsgX8zEC8ULgCSA/Bkj0bVBXdcnPji0Aj6:7fkZcvTIOSABd0jou
- TLSH T125367C16B3F84637E0BB927EC0B15A7DE771742A9B32C68F3104AA5D1D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-02_1d401a1fc307c316fdad39364a8cf98c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_1d401a1fc307c316fdad39364a8cf98c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_1d401a1fc307c316fdad39364a8cf98c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_stop_vidar
- Size 4.8MB
- SHA256 6a409befc21696446e124fbed2e49812550f04d2fb99df02eacd8a5a3417b533
- MD5 1d401a1fc307c316fdad39364a8cf98c
- SHA1 8a228a1aade6594a6f6d94ec3fe2ca8f91421b05
- SHA512 f25555011df7fd0d343b1ffcebc836e3ff22d9c427d023220f7317c2dd9490273fb24a11c751c45cb91f16f9f88eb98092750ed925c2bd4baeb8996e90973c8c
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbvT3S9tsgX8zEC8ULgCSA/Bkj0bVBXdcnPji0Aj6:7fkZcvTIOSABd0jou
- TLSH T125367C16B3F84637E0BB927EC0B15A7DE771742A9B32C68F3104AA5D1D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory