General
- Target 2026-07-09_4b0274bfaaf5dad123370b446b14c825_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar
- Size 11.1MB
- Sample260709-v474mafv6s
- SHA256 80e6fc800a324149bc877f21f685c496b3dc0dd2e1873359b447e9eba2d1a59e
- MD5 4b0274bfaaf5dad123370b446b14c825
- SHA1 9dbc889a865d9cf0cca350e8d2e1c8556d3e6b56
- SHA512 9a98afc81209aa347b3c78c86aabf4c136966bf76a7cda78a878c0969c75aefba24091e29f2e74c42f42e2be411ff5331847b19f54c0408d0f64f0d9c0438088
- SSDEEP 196608:+5MMm1JUR2L3dvvkKu/v1s6znJbf/DPWk6dZs:QMlIK3VMKu/v1LLJbf/D+TZs
- TLSH T180C6B086A6F102E4E5B6C13896422227F6B27C19433057DB7ADCAA1F1F737E0997E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_4b0274bfaaf5dad123370b446b14c825_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_4b0274bfaaf5dad123370b446b14c825_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_4b0274bfaaf5dad123370b446b14c825_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar
- Size 11.1MB
- SHA256 80e6fc800a324149bc877f21f685c496b3dc0dd2e1873359b447e9eba2d1a59e
- MD5 4b0274bfaaf5dad123370b446b14c825
- SHA1 9dbc889a865d9cf0cca350e8d2e1c8556d3e6b56
- SHA512 9a98afc81209aa347b3c78c86aabf4c136966bf76a7cda78a878c0969c75aefba24091e29f2e74c42f42e2be411ff5331847b19f54c0408d0f64f0d9c0438088
- SSDEEP 196608:+5MMm1JUR2L3dvvkKu/v1s6znJbf/DPWk6dZs:QMlIK3VMKu/v1LLJbf/D+TZs
- TLSH T180C6B086A6F102E4E5B6C13896422227F6B27C19433057DB7ADCAA1F1F737E0997E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE