General
- Target 2026-04-15_91b970d35e8946c6336dbc202b89d5b4_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- Sample260415-k3fb4sdt71
- SHA256 7b78e09251c4c1f5c6fd2ea39c752fe8d785efce238703acc510440b18f524f4
- MD5 91b970d35e8946c6336dbc202b89d5b4
- SHA1 cec586dfc36ab60d0580abd1e44c725ff5c37663
- SHA512 9c96a81e6ba62a5a68e86623c201c76b48d2461c5570010fb75a4afccbd80666401c8470964d8590a8572d611d66491b8330bdbef22d8536ceee715db5e781f5
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1p9LIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71W4jMTt4VB98QjZQFQpKZOyKI
- TLSH T1F4A71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_91b970d35e8946c6336dbc202b89d5b4_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_91b970d35e8946c6336dbc202b89d5b4_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_91b970d35e8946c6336dbc202b89d5b4_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- SHA256 7b78e09251c4c1f5c6fd2ea39c752fe8d785efce238703acc510440b18f524f4
- MD5 91b970d35e8946c6336dbc202b89d5b4
- SHA1 cec586dfc36ab60d0580abd1e44c725ff5c37663
- SHA512 9c96a81e6ba62a5a68e86623c201c76b48d2461c5570010fb75a4afccbd80666401c8470964d8590a8572d611d66491b8330bdbef22d8536ceee715db5e781f5
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1p9LIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71W4jMTt4VB98QjZQFQpKZOyKI
- TLSH T1F4A71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger