General
- Target 2026-11-01_8b737cbc37e9417ac48b5cf2d2ce483d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
- Size 24.7MB
- Sample261102-stvpfafe37
- SHA256 38f83e40473b2692a434dc00d40b9d41f30f17cea737a33aaef7451ad6a51cd9
- MD5 8b737cbc37e9417ac48b5cf2d2ce483d
- SHA1 77b806403936e3ac15cce3d525e37ef46961119f
- SHA512 5da394270b96ebbf282dceabee251afee29caafe9b9c9551f853b8b682dc210a345e0bf99870d5b29c6a47094670c1698ceb160ba4236af695c902abdd91a436
- SSDEEP 393216:dq5THNBpu1Qfc0odfq5THNBpu1Qfc0odt:dq1HNBpu1Qfc0o5q1HNBpu1Qfc0oX
- TLSH T16D475A1262D58F9DE05F9434CE16667066237C4A8FB19BDF2980BD693E326E06F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-11-01_8b737cbc37e9417ac48b5cf2d2ce483d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_8b737cbc37e9417ac48b5cf2d2ce483d_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_tofsee_vidar_wannacry
- Size 24.7MB
- SHA256 38f83e40473b2692a434dc00d40b9d41f30f17cea737a33aaef7451ad6a51cd9
- MD5 8b737cbc37e9417ac48b5cf2d2ce483d
- SHA1 77b806403936e3ac15cce3d525e37ef46961119f
- SHA512 5da394270b96ebbf282dceabee251afee29caafe9b9c9551f853b8b682dc210a345e0bf99870d5b29c6a47094670c1698ceb160ba4236af695c902abdd91a436
- SSDEEP 393216:dq5THNBpu1Qfc0odfq5THNBpu1Qfc0odt:dq1HNBpu1Qfc0o5q1HNBpu1Qfc0oX
- TLSH T16D475A1262D58F9DE05F9434CE16667066237C4A8FB19BDF2980BD693E326E06F3520F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Drops file in System32 directory