Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
18/04/2026, 06:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe
- Size 22.2MB
- Sample260418-hcdpgsh19y
- SHA256 9007e8388f15308520782fc204828928f5dda3e1b30e9df4b69d75d295eafecd
- MD5 d68fc0277d0aafc356cca70882799580
- SHA1 309cf1a5f88e8a15aa8938aa632d9ae85860161c
- SHA512 6260e50dd72312abac6b7788f8b6b223e51b69b5e027f336670cde8dec9a5bb7f9a674dc9baeea418b5bcd647cbc0cce9ac1fac318c24941f2b19edf4dd5f44e
- SSDEEP 393216:7eQ/9G7fuNDdlWGEzabAOYojKJeleY2ByJsv6tWKFdu9C6TzggiV9:MFLMlstzg
- TLSH T1C6379D47B2A105D4E076C038CAA7C507F7B1742A53B18BEB21A556EA2F37BE06D3B711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3048 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3048 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe 3048 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe 3048 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe 3048 2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-18_d68fc0277d0aafc356cca70882799580_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048