General
- Target 2026-04-15_ec2fd0a95c5d0a48889dee0d62d8a4ea_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- Sample260415-lr74esd19s
- SHA256 be8f9a29e5d70e204c814c0c7733fb13e3535c65455d54c9628c8f626d861652
- MD5 ec2fd0a95c5d0a48889dee0d62d8a4ea
- SHA1 e1c2be94718fcb51e89fd6434d837dbb58e560f1
- SHA512 4b3ae8f3b0adab475b783c7dfbb63699dc8b68861a006fa7f1c004ba20e79ebd6c748de755fe6ca30a0645d9d9a461ec66f77ee20fda8190a68b126e36190d0f
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1pMLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WvjMTt4VB98QjZQFQpKZOyKI
- TLSH T1DBA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_ec2fd0a95c5d0a48889dee0d62d8a4ea_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_ec2fd0a95c5d0a48889dee0d62d8a4ea_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_ec2fd0a95c5d0a48889dee0d62d8a4ea_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- SHA256 be8f9a29e5d70e204c814c0c7733fb13e3535c65455d54c9628c8f626d861652
- MD5 ec2fd0a95c5d0a48889dee0d62d8a4ea
- SHA1 e1c2be94718fcb51e89fd6434d837dbb58e560f1
- SHA512 4b3ae8f3b0adab475b783c7dfbb63699dc8b68861a006fa7f1c004ba20e79ebd6c748de755fe6ca30a0645d9d9a461ec66f77ee20fda8190a68b126e36190d0f
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1pMLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WvjMTt4VB98QjZQFQpKZOyKI
- TLSH T1DBA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger