Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/05/2026, 00:48
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 30.9MB
- Sample260530-a551faev5q
- SHA256 0eaf96afddecb095c5b8a99eeb2ffa9b1a3559c83a816d3d3d24aacad985802c
- MD5 070cee61a567b2704d606ade02443c93
- SHA1 8d63b443ac74a643667900b80bf616d95b8da84d
- SHA512 45e852118cdde3898f517f717ca2e45016f3417525073d0118fd631ff02d21783fc00b70a542ea1df6dafe4994961a4687ac2bfab1dc5cff4e7645c26e03de6a
- SSDEEP 196608:Z9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yOgOZvaM+7kUM:ZB8VvPeb1ADOC0Y/OnFt7yO9ZK7kUM
- TLSH T1A56795215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE09CE9669B6427A1EA4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4468 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4468 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4468
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 2504e60aefe08531a83b8381e423e813c437082c252143605499bc291806623a
- MD5 c774e1690f98c40a69e2d2bddf1ae5d9
- SHA1 1c98c9ba0cbb3201f9cd840cc346c1a34d1cf473
- SHA512 4be19bf8b9641bf4c9ca11c7f7de72e92225ad4191659f6ee91ca3009d0af76821d3b0d0e33e57b9e9cd32547cfbb4861d8c155699d557bcb92a4a4629526d50
- TLSH T1A0B012ADE54562F932773160D0C1F6B42B301409E4623C3CA3EE361B6065BAF2377092
- MD5 SHA1 SHA512 TLSH