General
- Target 2026-04-15_df07e1ea72aa2c1926efce00bdc21a60_akira_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.4MB
- Sample260415-xdhr6aa18z
- SHA256 0e4061ca4531599d0654df96b069e5a2897f7535371bad51e5490a1693626bea
- MD5 df07e1ea72aa2c1926efce00bdc21a60
- SHA1 d82c82f88357a33d208f05d17ebe1f5a0577fb0a
- SHA512 e9e158409c40f311fe2b36b2efd88c195703a43ebc3d32752cc160d9941f94b01104ae9e9c69965beb945369c477c7302a9a341bb415886c11ee2e9a8c121ee7
- SSDEEP 98304:368h2LyXWy+MKKy19ogx4O6Kh61+CrKcigR:368h2LyXWy3KKy19ogx4hKhK5mcigR
- TLSH T1FD769E69B6BC00D9D87AC2BCC6465217E7B2B81517B057DF1A6486FA0F63AE01E7F700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_df07e1ea72aa2c1926efce00bdc21a60_akira_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_df07e1ea72aa2c1926efce00bdc21a60_akira_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_df07e1ea72aa2c1926efce00bdc21a60_akira_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.4MB
- SHA256 0e4061ca4531599d0654df96b069e5a2897f7535371bad51e5490a1693626bea
- MD5 df07e1ea72aa2c1926efce00bdc21a60
- SHA1 d82c82f88357a33d208f05d17ebe1f5a0577fb0a
- SHA512 e9e158409c40f311fe2b36b2efd88c195703a43ebc3d32752cc160d9941f94b01104ae9e9c69965beb945369c477c7302a9a341bb415886c11ee2e9a8c121ee7
- SSDEEP 98304:368h2LyXWy+MKKy19ogx4O6Kh61+CrKcigR:368h2LyXWy3KKy19ogx4hKhK5mcigR
- TLSH T1FD769E69B6BC00D9D87AC2BCC6465217E7B2B81517B057DF1A6486FA0F63AE01E7F700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Creates new service(s)
Drops startup file
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
2System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1