General
- Target 2026-07-11_7d2ca097a25fb070d5e08d60b263dcf5_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_quasar-rat_rusty-stealer_satacom_vidar
- Size 66.0MB
- Sample260711-mx5e6aav8x
- SHA256 72f324b115bbfeccddf177af96227e33949e792044059bf4e757ca085378b79d
- MD5 7d2ca097a25fb070d5e08d60b263dcf5
- SHA1 83338c47912d58fbd85d68414fc4ac87d88dab4d
- SHA512 e3584546c4e7979efd590a40ce7618c1eff1f106307896fd7d198e08fdf62b2eca6bdf58c1270bf45db09ad791ddcc94251780bd0a0c06f7e55a914db6a05a4a
- SSDEEP 786432:FmxfoILjKt2Cvy31ISuig9QvHD6EI8jhcB:FH/2Cvg6EI8iB
- TLSH T10AE75A032671A045F978C0788E42D8B34A727C9F072069E776DC6A792BB3DE21FBD558
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-11_7d2ca097a25fb070d5e08d60b263dcf5_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_7d2ca097a25fb070d5e08d60b263dcf5_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_7d2ca097a25fb070d5e08d60b263dcf5_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_quasar-rat_rusty-stealer_satacom_vidar
- Size 66.0MB
- SHA256 72f324b115bbfeccddf177af96227e33949e792044059bf4e757ca085378b79d
- MD5 7d2ca097a25fb070d5e08d60b263dcf5
- SHA1 83338c47912d58fbd85d68414fc4ac87d88dab4d
- SHA512 e3584546c4e7979efd590a40ce7618c1eff1f106307896fd7d198e08fdf62b2eca6bdf58c1270bf45db09ad791ddcc94251780bd0a0c06f7e55a914db6a05a4a
- SSDEEP 786432:FmxfoILjKt2Cvy31ISuig9QvHD6EI8jhcB:FH/2Cvg6EI8iB
- TLSH T10AE75A032671A045F978C0788E42D8B34A727C9F072069E776DC6A792BB3DE21FBD558
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL