General
- Target 2026-04-15_fb303758a724eb92c36d3a5ae0c23b57_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- Sample260415-c9dsvsdz2r
- SHA256 56d8b27f812141382391b7ed831d9a9f6cce8a77f451e29d87f323c75d3f2f33
- MD5 fb303758a724eb92c36d3a5ae0c23b57
- SHA1 0041b8284aba7e8d076b6d29f6d031dad7e9e584
- SHA512 0ae440c22fef2227375acedbd7b3b62223bf4f123feca61c4fe75cb1b5d365aef28351fe7cf930f086280982370087eda62b3b8a33098240c3fa874b5c793a49
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1pLLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WGjMTt4VB98QjZQFQpKZOyKI
- TLSH T1CBA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_fb303758a724eb92c36d3a5ae0c23b57_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_fb303758a724eb92c36d3a5ae0c23b57_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_fb303758a724eb92c36d3a5ae0c23b57_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- SHA256 56d8b27f812141382391b7ed831d9a9f6cce8a77f451e29d87f323c75d3f2f33
- MD5 fb303758a724eb92c36d3a5ae0c23b57
- SHA1 0041b8284aba7e8d076b6d29f6d031dad7e9e584
- SHA512 0ae440c22fef2227375acedbd7b3b62223bf4f123feca61c4fe75cb1b5d365aef28351fe7cf930f086280982370087eda62b3b8a33098240c3fa874b5c793a49
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1pLLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WGjMTt4VB98QjZQFQpKZOyKI
- TLSH T1CBA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
Suspicious use of NtSetInformationThreadHideFromDebugger