aa3e3ff2c4bc5ca775c8ccb189d5802670ecb082d623a1e2626ac890802b7208

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:33

Target
2026-04-15_682f0635606847dd560ee2c608035439_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar.exe
Size 3.5MB
Sample260415-szce2set5z
SHA256 aa3e3ff2c4bc5ca775c8ccb189d5802670ecb082d623a1e2626ac890802b7208
MD5 682f0635606847dd560ee2c608035439
SHA1 0a9a0ea27a1e6beda1eacce6513e05b4bbb16090
SHA512 f0ea83eaeae27e1865f263d5fce2ebd2c93cf00ff9d138c8f654ab038b58589191de274a969487228d241b5ea67859872bcfcb0b7a3695201ba2254745e14424
SSDEEP 49152:M+/PivcpfQvdaKYXf3CUeyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755W:x/PvOAjcXvvOOc5c
TLSH
T18B06391E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1720-0-0x0000000000400000-0x0000000000411000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2944	1720	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_682f0635606847dd560ee2c608035439_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_682f0635606847dd560ee2c608035439_akira_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar.exe"
1⤵
PID:1720
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 8
  2⤵
  - Program crash
  PID:2944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1720 -ip 1720
1⤵
PID:4292

memory/1720-0-0x0000000000400000-0x0000000000411000-memory.dmp

Download