General
- Target 2026-05-17_8109f411d0f9a8ab3d563e149e550a86_akira_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260517-fp8dhsf14p
- SHA256 eb85f271e403d3d061076b76196f3497f4ecbb256d6836c1ec635ea97e8f1381
- MD5 8109f411d0f9a8ab3d563e149e550a86
- SHA1 6fd54b659de57c5a9e7235e2bb3bfc15fa08f32a
- SHA512 3c8886d45e7883dfecdf4c66a69a5302aa335ce4c86b64709a74cd1a5c72bf1ece0dfa9e9515ebdad74a7204afbf89d14803bccec31404101c73b47a31fed2e0
- SSDEEP 49152:z8NVfgU9QQsmLFEuVebedv9uNBb8AfqK9qrO1LS9RhSq15vTNuHv/QXd9CQxM4kW:z4Fk/fLqrOiOc5ij6
- TLSH T15E065B2E735881E9D266D5BD8A42C506E371F801CB3156DF26A4475E2FBBBE34E3A340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_8109f411d0f9a8ab3d563e149e550a86_akira_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_8109f411d0f9a8ab3d563e149e550a86_akira_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_8109f411d0f9a8ab3d563e149e550a86_akira_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 eb85f271e403d3d061076b76196f3497f4ecbb256d6836c1ec635ea97e8f1381
- MD5 8109f411d0f9a8ab3d563e149e550a86
- SHA1 6fd54b659de57c5a9e7235e2bb3bfc15fa08f32a
- SHA512 3c8886d45e7883dfecdf4c66a69a5302aa335ce4c86b64709a74cd1a5c72bf1ece0dfa9e9515ebdad74a7204afbf89d14803bccec31404101c73b47a31fed2e0
- SSDEEP 49152:z8NVfgU9QQsmLFEuVebedv9uNBb8AfqK9qrO1LS9RhSq15vTNuHv/QXd9CQxM4kW:z4Fk/fLqrOiOc5ij6
- TLSH T15E065B2E735881E9D266D5BD8A42C506E371F801CB3156DF26A4475E2FBBBE34E3A340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.