General
- Target 2026-06-30_69822faac2c9392ba9db7d61c6f5ee13_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_poet-rat_rusty-stealer_satacom_stealc_vidar
- Size 78.1MB
- Sample260701-e6cgqset6j
- SHA256 858d2d6596a98733583fe672d65143e50601caa7ca13d94957acacd0b3d17d3d
- MD5 69822faac2c9392ba9db7d61c6f5ee13
- SHA1 a444f7d90d2ec4bf7840c21e658b528e3931d6a5
- SHA512 2a46a414b0f337d6b66031d4a1a2176c360e22d7d25894f609f738e8f98ff38f72af1358ee4e67af2cbe7f7e0adfdbd749c0bccf520ae690a4cd50a22f3e6941
- SSDEEP 786432:jD42EBRrWflljmfOPodvjP5wLL7hA3iMtdiznn+xI/kMaz7YsED60+VimCgSl/6p:nodvjSLL7hKmn2Sl/6ArK
- TLSH T1DB088C47B3A510D5D4BBD238CA4B8617F7B27C51032197CB1168ABA92F73BE12A3E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_69822faac2c9392ba9db7d61c6f5ee13_akira_cobalt-strike_coinminer_glassworm_hijackloader_ice.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_69822faac2c9392ba9db7d61c6f5ee13_akira_cobalt-strike_coinminer_glassworm_hijackloader_ice.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_69822faac2c9392ba9db7d61c6f5ee13_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_poet-rat_rusty-stealer_satacom_stealc_vidar
- Size 78.1MB
- SHA256 858d2d6596a98733583fe672d65143e50601caa7ca13d94957acacd0b3d17d3d
- MD5 69822faac2c9392ba9db7d61c6f5ee13
- SHA1 a444f7d90d2ec4bf7840c21e658b528e3931d6a5
- SHA512 2a46a414b0f337d6b66031d4a1a2176c360e22d7d25894f609f738e8f98ff38f72af1358ee4e67af2cbe7f7e0adfdbd749c0bccf520ae690a4cd50a22f3e6941
- SSDEEP 786432:jD42EBRrWflljmfOPodvjP5wLL7hA3iMtdiznn+xI/kMaz7YsED60+VimCgSl/6p:nodvjSLL7hKmn2Sl/6ArK
- TLSH T1DB088C47B3A510D5D4BBD238CA4B8617F7B27C51032197CB1168ABA92F73BE12A3E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing commands for clearing Windows Event Logs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables referencing many IR and analysis tools
-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)