Analysis
- max time kernel
149s - max time network
128s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/06/2026, 04:46
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target 2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 30.9MB
- Sample260605-fd4aesb19k
- SHA256 418795799ca069861354ab7c31cb1a5bb846c6ee3ddbd5cea1fd172094fec844
- MD5 0a2c12e410c5cd866172237eba3b93a3
- SHA1 f77886f28c1967817f40e37a85bcc3562ac03f14
- SHA512 cb0c04bcd6ce3cffd2bd656cb03488537c6f6ff38e5157635de9ef08238f85ea6f66a97ccabf4af60f81334cdc6f4fa47285eb14ed357a96507a8719eb80666a
- SSDEEP 196608:U9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yOPlXvRse7kUM:UB8VvPeb1ADOC0Y/OnFt7yOdXF7kUM
- TLSH T1A46785215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE09CE9669B6427A1EA4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4116 2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4116 2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-05_0a2c12e410c5cd866172237eba3b93a3_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4116
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 7d7ca23e513f909429d9257e5f7c92eba7869c198f47e0a93e1e9e0438b29523
- MD5 84b6f904742c19ae1b210efcd708418b
- SHA1 caa3f1c31d41e760f6aecd87aae366bba3c48fa3
- SHA512 10621e2fb0d9dcbd893662d310ac522bcb8680a0c8a9bfb94e11d89d32b9508af0b2304b03d6ec89e5c91e355ff708a535e857ef61a99fb30b65307240ab38dd
- TLSH T108B012ACE54562FC32737120E0C0F6F42B30141BA0613838B3DE371A6456BBF23A7882
- MD5 SHA1 SHA512 TLSH