General
- Target 2026-07-09_1d3c07819a86da4360ade9474f81d69c_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar
- Size 11.1MB
- Sample260709-yeqd3agy8p
- SHA256 4088553df8906b96d9f8dab2ebaa2e03a3470cd57e5925a110a3be4881bfffc6
- MD5 1d3c07819a86da4360ade9474f81d69c
- SHA1 a15292f9ba008ee99ba554ae81a2c0a146b3ec75
- SHA512 1e2dcd88987cb84afb08a4c8b8fb210c1402316f6ff15bb7984f363e9f036cac5d4d2e25f4b784d7b32384e495e0981ec9585406edc03cf459e737432a92b81c
- SSDEEP 196608:o5MMm1JUR2v3dPvkKu/v1sLznJbf/DPFk6dZs:uMlIO31MKu/v1uLJbf/DtTZs
- TLSH T197C6B086A6F102E4E5B6C13896422227F6B27C19433057DB7ADCAA1F1F737E0997E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_1d3c07819a86da4360ade9474f81d69c_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_1d3c07819a86da4360ade9474f81d69c_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_1d3c07819a86da4360ade9474f81d69c_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar
- Size 11.1MB
- SHA256 4088553df8906b96d9f8dab2ebaa2e03a3470cd57e5925a110a3be4881bfffc6
- MD5 1d3c07819a86da4360ade9474f81d69c
- SHA1 a15292f9ba008ee99ba554ae81a2c0a146b3ec75
- SHA512 1e2dcd88987cb84afb08a4c8b8fb210c1402316f6ff15bb7984f363e9f036cac5d4d2e25f4b784d7b32384e495e0981ec9585406edc03cf459e737432a92b81c
- SSDEEP 196608:o5MMm1JUR2v3dPvkKu/v1sLznJbf/DPFk6dZs:uMlIO31MKu/v1uLJbf/DtTZs
- TLSH T197C6B086A6F102E4E5B6C13896422227F6B27C19433057DB7ADCAA1F1F737E0997E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE