General
- Target 2026-04-20_6a3d71711ed412056633a3d59f13ddf7_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 7.7MB
- Sample260420-pm5paaet71
- SHA256 4407cc0daeb7864fff3aa53cc209d4c0713ab1099c08d18fb1eef07606a5542c
- MD5 6a3d71711ed412056633a3d59f13ddf7
- SHA1 86fe60360a5e93eea5652b1235c90ffde9638076
- SHA512 73a2ec681faf1e103def1fc26b2135298061ffdda3b4d932e81b9532362ee1b31e1e394d518009bbfe5895964a385f6bf28efba226c375cd39f2dc883b868f68
- SSDEEP 98304:QmRUcfT1611PFZzY8zWDaDHiQ8QThojbCRKGCFk/fUqrOiOc5G:AckPhR1cF+Ci+
- TLSH T13E86271EE2A80098E1AE9178CB568506F673B84547A196DF12D0C73E1F73BE15EFA313
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_6a3d71711ed412056633a3d59f13ddf7_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hija.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_6a3d71711ed412056633a3d59f13ddf7_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 7.7MB
- SHA256 4407cc0daeb7864fff3aa53cc209d4c0713ab1099c08d18fb1eef07606a5542c
- MD5 6a3d71711ed412056633a3d59f13ddf7
- SHA1 86fe60360a5e93eea5652b1235c90ffde9638076
- SHA512 73a2ec681faf1e103def1fc26b2135298061ffdda3b4d932e81b9532362ee1b31e1e394d518009bbfe5895964a385f6bf28efba226c375cd39f2dc883b868f68
- SSDEEP 98304:QmRUcfT1611PFZzY8zWDaDHiQ8QThojbCRKGCFk/fUqrOiOc5G:AckPhR1cF+Ci+
- TLSH T13E86271EE2A80098E1AE9178CB568506F673B84547A196DF12D0C73E1F73BE15EFA313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops startup file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1