General
- Target 2026-04-20_168428fd8eb01b498c97f8168f5b465e_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- Sample260420-tk1d1aby9w
- SHA256 2c2cf9bd155a1315935d450f8d70b954b9f7d460496a6dec7dcaf733a2fae217
- MD5 168428fd8eb01b498c97f8168f5b465e
- SHA1 1fc9c0b50f4366ee73bd4de4d00f4352aaf36d1a
- SHA512 ea7e37e7b4c04a04982a016e1b53d361d52196d2987fdbfc205cd6a535e53f396a64bcc99dfc487b1ec8278e093c974980420d20ed7ab0a830e99e93f565e77c
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1prLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WmjMTt4VB98QjZQFQpKZOyKI
- TLSH T1DAA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-20_168428fd8eb01b498c97f8168f5b465e_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_168428fd8eb01b498c97f8168f5b465e_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_168428fd8eb01b498c97f8168f5b465e_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.2MB
- SHA256 2c2cf9bd155a1315935d450f8d70b954b9f7d460496a6dec7dcaf733a2fae217
- MD5 168428fd8eb01b498c97f8168f5b465e
- SHA1 1fc9c0b50f4366ee73bd4de4d00f4352aaf36d1a
- SHA512 ea7e37e7b4c04a04982a016e1b53d361d52196d2987fdbfc205cd6a535e53f396a64bcc99dfc487b1ec8278e093c974980420d20ed7ab0a830e99e93f565e77c
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1prLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WmjMTt4VB98QjZQFQpKZOyKI
- TLSH T1DAA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger