Analysis
- max time kernel
149s - max time network
148s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
30/05/2026, 00:48
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 30.9MB
- Sample260530-a551faev5q
- SHA256 0eaf96afddecb095c5b8a99eeb2ffa9b1a3559c83a816d3d3d24aacad985802c
- MD5 070cee61a567b2704d606ade02443c93
- SHA1 8d63b443ac74a643667900b80bf616d95b8da84d
- SHA512 45e852118cdde3898f517f717ca2e45016f3417525073d0118fd631ff02d21783fc00b70a542ea1df6dafe4994961a4687ac2bfab1dc5cff4e7645c26e03de6a
- SSDEEP 196608:Z9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yOgOZvaM+7kUM:ZB8VvPeb1ADOC0Y/OnFt7yO9ZK7kUM
- TLSH T1A56795215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE09CE9669B6427A1EA4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3636 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3636 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3636 2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-30_070cee61a567b2704d606ade02443c93_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3636
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 8f4368577e63ee33c1bebb1a55550b4ec1306cb4585dc1a6ec55bf0edbe169ea
- MD5 86e262375a3b835b273f1f2c798c4e1a
- SHA1 cd107ce1e7dc1e1acec45f4fd03e8db83c32c6c6
- SHA512 cf92880fb1946abeabd403e0eb43c931d73b100fcbd9c4315cd5bcf6d25c24c609754b8a15c56179541436865828c899ac558e5d306b33492f3d5a2e548f6898
- TLSH T1A4B012ACE54562F932773260D081F6B42B301409A461383D93EE3E1B6066BAF237709A
- MD5 SHA1 SHA512 TLSH