General
- Target 2026-07-08_a9df7858646c93ae726c4cfdb61bcaf5_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc
- Size 4.0MB
- Sample260708-ew6ylaax2z
- SHA256 31a6d89d495f3cb226ec58a0aa92b00fd8a452c069144cdf689fa3f00faa5087
- MD5 a9df7858646c93ae726c4cfdb61bcaf5
- SHA1 6524820ff6569a38b406c176cc0136cabb604b08
- SHA512 e518e86cfe5a11a67987d8087e15befd3ed6561dcece21337e93dd18049cdf1f6e15d410fafff7af617afaaff9fc3b6e1351c98dcfa5a1ddb7c2d58c9bbde89e
- SSDEEP 98304:yitxIJhrOOoGkxL0mqEk27mEf1c8U6rjwl6Flg2:rtSuxjk27mEf1c8U6r8l6Fq2
- TLSH T194168D2777A801E9C0B7C1B8CA9B8623E772B4191375A7DF16E086561F236E16F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_a9df7858646c93ae726c4cfdb61bcaf5_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-08_a9df7858646c93ae726c4cfdb61bcaf5_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-08_a9df7858646c93ae726c4cfdb61bcaf5_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc
- Size 4.0MB
- SHA256 31a6d89d495f3cb226ec58a0aa92b00fd8a452c069144cdf689fa3f00faa5087
- MD5 a9df7858646c93ae726c4cfdb61bcaf5
- SHA1 6524820ff6569a38b406c176cc0136cabb604b08
- SHA512 e518e86cfe5a11a67987d8087e15befd3ed6561dcece21337e93dd18049cdf1f6e15d410fafff7af617afaaff9fc3b6e1351c98dcfa5a1ddb7c2d58c9bbde89e
- SSDEEP 98304:yitxIJhrOOoGkxL0mqEk27mEf1c8U6rjwl6Flg2:rtSuxjk27mEf1c8U6r8l6Fq2
- TLSH T194168D2777A801E9C0B7C1B8CA9B8623E772B4191375A7DF16E086561F236E16F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1