General
- Target 2026-05-23_e38404216a66b156ecbe64fddfdb440b_akira_coinminer_dosia_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_quasar-rat_remcos_vidar
- Size 65.7MB
- Sample260523-dddnnaes7v
- SHA256 2c8f611b0f2c157f010c20379d4fcd725a8c462a8d226ae0095e3e0fb110ddbe
- MD5 e38404216a66b156ecbe64fddfdb440b
- SHA1 f4be592aa64a4c173be9cb8094235a971b94c047
- SHA512 e864dbd14e0e8d145e2697cc8aead6f0da08ac75750d2fc1faa2bcabd3e2709ea7a091d4ebd1b883a5d882a097d7c7ecee180d5f4d62f3434a9e9286d9c741e2
- SSDEEP 786432:XbVmY+pML2JiAiHZIuvLYgMjqxzQLqoGiQV0B1+y:LqJiAiHZIcfBztoGtV0Bt
- TLSH T1D5E76C47E9A580A5C4EED134C6328263BBB17C559B3163D73BA4FB642F32BD0A679310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-23_e38404216a66b156ecbe64fddfdb440b_akira_coinminer_dosia_glassworm_hijackloader_icedid_luca.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_e38404216a66b156ecbe64fddfdb440b_akira_coinminer_dosia_glassworm_hijackloader_icedid_luca.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_e38404216a66b156ecbe64fddfdb440b_akira_coinminer_dosia_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_quasar-rat_remcos_vidar
- Size 65.7MB
- SHA256 2c8f611b0f2c157f010c20379d4fcd725a8c462a8d226ae0095e3e0fb110ddbe
- MD5 e38404216a66b156ecbe64fddfdb440b
- SHA1 f4be592aa64a4c173be9cb8094235a971b94c047
- SHA512 e864dbd14e0e8d145e2697cc8aead6f0da08ac75750d2fc1faa2bcabd3e2709ea7a091d4ebd1b883a5d882a097d7c7ecee180d5f4d62f3434a9e9286d9c741e2
- SSDEEP 786432:XbVmY+pML2JiAiHZIuvLYgMjqxzQLqoGiQV0B1+y:LqJiAiHZIcfBztoGtV0Bt
- TLSH T1D5E76C47E9A580A5C4EED134C6328263BBB17C559B3163D73BA4FB642F32BD0A679310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
UPX dump on OEP (original entry point)
-
Suspicious use of SetThreadContext