General
- Target 2026-07-09_5aa46f7b5b00edaede6ed6e75e48e045_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar
- Size 11.1MB
- Sample260709-zbbl6sht2k
- SHA256 ef66129cff1343539a5945be7546ff6abd30bbc6d3a83db69a95ee7f1dfd908f
- MD5 5aa46f7b5b00edaede6ed6e75e48e045
- SHA1 6e0ecdbddb18bf1e2434ca88b0435e565fdd5232
- SHA512 6f753b5b1668415c13615d90cd27cbf9417a2f71ce7a81728eadb56088d6639ce6a0c6627c0e81c81861a767165982035a07d730f6854aea3542a69de3a6a8d6
- SSDEEP 196608:o5MMm1JUR2L3dPvkKu/v1sLznJbf/DPFk6dZs:uMlIK31MKu/v1uLJbf/DtTZs
- TLSH T170C6B086A6F102E4E5B6C13896422227F6B27C19433057DB7ADCAA1F1F737E0997E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_5aa46f7b5b00edaede6ed6e75e48e045_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_5aa46f7b5b00edaede6ed6e75e48e045_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_5aa46f7b5b00edaede6ed6e75e48e045_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar
- Size 11.1MB
- SHA256 ef66129cff1343539a5945be7546ff6abd30bbc6d3a83db69a95ee7f1dfd908f
- MD5 5aa46f7b5b00edaede6ed6e75e48e045
- SHA1 6e0ecdbddb18bf1e2434ca88b0435e565fdd5232
- SHA512 6f753b5b1668415c13615d90cd27cbf9417a2f71ce7a81728eadb56088d6639ce6a0c6627c0e81c81861a767165982035a07d730f6854aea3542a69de3a6a8d6
- SSDEEP 196608:o5MMm1JUR2L3dPvkKu/v1sLznJbf/DPFk6dZs:uMlIK31MKu/v1uLJbf/DtTZs
- TLSH T170C6B086A6F102E4E5B6C13896422227F6B27C19433057DB7ADCAA1F1F737E0997E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE