General
- Target 2026-07-11_0f029960477d98ec08a2aeeb0a5dac1d_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- Sample260711-llnslafv2l
- SHA256 4a002841e839bed701a0c2979ac843253032010d258322ee6b654ab17d889dcb
- MD5 0f029960477d98ec08a2aeeb0a5dac1d
- SHA1 4c20d1ef580f8d04d59cd346f4d19d423d8e5a7e
- SHA512 e83b52c8a1cb1f5035b97b8787bb63c351bac4d06ece515efb204be48044b7d8ccf3fc9ec17e2f37d3fba85a069839be50bc76027aeadf7d0d2e52d748df74b6
- SSDEEP 98304:uh+dco1pKsPW3sSJZsqgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdqfC:WEr1I2Wcqvjj7UlG8drCeqBvKCzcLMC
- TLSH T197C65C1B62EC01DCD0FAD1B9C91B4913E675745A037183DF179086AA2FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_0f029960477d98ec08a2aeeb0a5dac1d_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_0f029960477d98ec08a2aeeb0a5dac1d_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_0f029960477d98ec08a2aeeb0a5dac1d_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- SHA256 4a002841e839bed701a0c2979ac843253032010d258322ee6b654ab17d889dcb
- MD5 0f029960477d98ec08a2aeeb0a5dac1d
- SHA1 4c20d1ef580f8d04d59cd346f4d19d423d8e5a7e
- SHA512 e83b52c8a1cb1f5035b97b8787bb63c351bac4d06ece515efb204be48044b7d8ccf3fc9ec17e2f37d3fba85a069839be50bc76027aeadf7d0d2e52d748df74b6
- SSDEEP 98304:uh+dco1pKsPW3sSJZsqgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdqfC:WEr1I2Wcqvjj7UlG8drCeqBvKCzcLMC
- TLSH T197C65C1B62EC01DCD0FAD1B9C91B4913E675745A037183DF179086AA2FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.