b13029af04e175dce4eb41fd04682121ab62a9f7b9106ef6e2e8261f6acd085f

General

Target
2026-05-11_18e0d4a8f45b08ec5c6313fe963e9985_akira_glassworm_icedid_luca-stealer_njrat_stealc
Size 8.8MB
Sample260511-d13lasd15r
SHA256 b13029af04e175dce4eb41fd04682121ab62a9f7b9106ef6e2e8261f6acd085f
MD5 18e0d4a8f45b08ec5c6313fe963e9985
SHA1 4c576adfafc7e69606c8db090dedf38fa57c77d8
SHA512 227652d965e16eab3f35ed0b6c1f7462a953ed6e1dfa7459b4df1d0f86737a6d899d4d8889e9d6ed0dbdaa800b45aeab64dd761e9d9dc9f90be7ff1d2b0f8573
SSDEEP 98304:9DxgcMMvi6pj3I0vv4qV92TE65CixSBC2XaxNU:91mMvimjb34qV92TE65FSBjXa/U
TLSH
T16B969D1BA26901F4C0A6D178DA438D13F672748A433596EB3BDC45161FE7BE0BE39B21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-05-11_18e0d4a8f45b08ec5c6313fe963e9985_akira_glassworm_icedid_luca-stealer_njrat_stealc
- Size 8.8MB
- SHA256 b13029af04e175dce4eb41fd04682121ab62a9f7b9106ef6e2e8261f6acd085f
- MD5 18e0d4a8f45b08ec5c6313fe963e9985
- SHA1 4c576adfafc7e69606c8db090dedf38fa57c77d8
- SHA512 227652d965e16eab3f35ed0b6c1f7462a953ed6e1dfa7459b4df1d0f86737a6d899d4d8889e9d6ed0dbdaa800b45aeab64dd761e9d9dc9f90be7ff1d2b0f8573
- SSDEEP 98304:9DxgcMMvi6pj3I0vv4qV92TE65CixSBC2XaxNU:91mMvimjb34qV92TE65FSBjXa/U
- TLSH
  T16B969D1BA26901F4C0A6D178DA438D13F672748A433596EB3BDC45161FE7BE0BE39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

bootkit defense_evasion discovery execution persistence trojan
- Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in r
- Detects executables containing commands for clearing Windows Event Logs
- Detects executables referencing combination of virtualization drivers
- Detects executables referencing many IR and analysis tools
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2