General
- Target 2026-04-18_03e0bbf41e82a4784a4908b9e5afde7f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- Sample260418-m7fjsaf18j
- SHA256 6a38dc4010d16ab3834740680adaa7fb910bf253c1dc22136387f84eb0a6c980
- MD5 03e0bbf41e82a4784a4908b9e5afde7f
- SHA1 8aff8c200a3eccccd73dd45397573ed3e1e5ce37
- SHA512 b0477dea07838b4b5b6701c388a24b67db31e7504987b90ee124daa38653b5a9ba7b7d776da3f9c8b5a430c73b04204162678b0e150552c47b7b553cfbd1636e
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1paLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WVjMTt4VB98QjZQFQpKZOyKI
- TLSH T1B9A71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-18_03e0bbf41e82a4784a4908b9e5afde7f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_03e0bbf41e82a4784a4908b9e5afde7f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_03e0bbf41e82a4784a4908b9e5afde7f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- SHA256 6a38dc4010d16ab3834740680adaa7fb910bf253c1dc22136387f84eb0a6c980
- MD5 03e0bbf41e82a4784a4908b9e5afde7f
- SHA1 8aff8c200a3eccccd73dd45397573ed3e1e5ce37
- SHA512 b0477dea07838b4b5b6701c388a24b67db31e7504987b90ee124daa38653b5a9ba7b7d776da3f9c8b5a430c73b04204162678b0e150552c47b7b553cfbd1636e
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1paLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WVjMTt4VB98QjZQFQpKZOyKI
- TLSH T1B9A71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
Suspicious use of NtSetInformationThreadHideFromDebugger