General
- Target 2026-07-08_3dbf435b704383c5b687ff1e423c0c4b_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc
- Size 3.9MB
- Sample260708-fdpr2aa13y
- SHA256 47f5faf151663a95c02607099be536e178744db56264e139e36856cd861e5aa1
- MD5 3dbf435b704383c5b687ff1e423c0c4b
- SHA1 22e0e3db24314e3e512117249fb0260993ab4f93
- SHA512 dd1287bf2934a0d01f15f62a23ead49b6344625daea4b31f1a9552ffdb4fd457cc5082e7c7dcc732c7a2418206ac6ffa3e5c3fff44828cb3091008879df43ae7
- SSDEEP 98304:uBmD33+PnVs9q8SdeF0e5SMekVMJ+7yisVCwksakV:Qm73A8Ss5SMekVMJ+7yi8Cv1kV
- TLSH T189169D27A3E801EAC0B7C1B8CA578723E772B4591375A7DF16E086562F236E15E3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_3dbf435b704383c5b687ff1e423c0c4b_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-08_3dbf435b704383c5b687ff1e423c0c4b_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-08_3dbf435b704383c5b687ff1e423c0c4b_akira_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_stealc
- Size 3.9MB
- SHA256 47f5faf151663a95c02607099be536e178744db56264e139e36856cd861e5aa1
- MD5 3dbf435b704383c5b687ff1e423c0c4b
- SHA1 22e0e3db24314e3e512117249fb0260993ab4f93
- SHA512 dd1287bf2934a0d01f15f62a23ead49b6344625daea4b31f1a9552ffdb4fd457cc5082e7c7dcc732c7a2418206ac6ffa3e5c3fff44828cb3091008879df43ae7
- SSDEEP 98304:uBmD33+PnVs9q8SdeF0e5SMekVMJ+7yisVCwksakV:Qm73A8Ss5SMekVMJ+7yi8Cv1kV
- TLSH T189169D27A3E801EAC0B7C1B8CA578723E772B4591375A7DF16E086562F236E15E3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1