General
- Target 2026-07-02_a26d359c8df3a185c4ad1bda99d6aabf_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- Sample260702-ltlcfafw5v
- SHA256 fef4a1ec3b93d41a2ccd5fd861dba468a747b87e469a390ec7659822d820cc7c
- MD5 a26d359c8df3a185c4ad1bda99d6aabf
- SHA1 4792a2a879235d1b191b4c2a0e7e89313ecbfb16
- SHA512 171567c0c67c234e6ffc0c2c798d3639bdf1f547bd6bfa0195f3107e3a068a1efff8696efda28b46125f9139aaa64f861704c4fc0f1615164714dded93f9c978
- SSDEEP 98304:Ah+Qco1pKsPW3sSJZsegajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdxZb:Mxr1I2Wcqzjj7UlG8drCeqBvKCzcLd
- TLSH T1AFC65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a26d359c8df3a185c4ad1bda99d6aabf_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a26d359c8df3a185c4ad1bda99d6aabf_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260630-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a26d359c8df3a185c4ad1bda99d6aabf_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- SHA256 fef4a1ec3b93d41a2ccd5fd861dba468a747b87e469a390ec7659822d820cc7c
- MD5 a26d359c8df3a185c4ad1bda99d6aabf
- SHA1 4792a2a879235d1b191b4c2a0e7e89313ecbfb16
- SHA512 171567c0c67c234e6ffc0c2c798d3639bdf1f547bd6bfa0195f3107e3a068a1efff8696efda28b46125f9139aaa64f861704c4fc0f1615164714dded93f9c978
- SSDEEP 98304:Ah+Qco1pKsPW3sSJZsegajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdxZb:Mxr1I2Wcqzjj7UlG8drCeqBvKCzcLd
- TLSH T1AFC65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.