2026-07-11_04e0d833b4cfaae3d6a26f0c1bb02934_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar

General

Target
2026-07-11_04e0d833b4cfaae3d6a26f0c1bb02934_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
Size 51.2MB
Sample260711-xpdbtabw7z
SHA256 ecd4d47fbd137b807b0de202ebea4a4327a1d1e0f7e5873961e7e5f1e4da3dd7
MD5 04e0d833b4cfaae3d6a26f0c1bb02934
SHA1 4cc0a3202ac57a5f56a8e0484eb874b89fed8aa8
SHA512 56510b317de14189822841a7749a67768574d64340be9d2a75e08193cd64fbbe777058230dcccd7ef4257adbe0193299fe5ea9bf6d8527b0a6061c07a2203e05
SSDEEP 196608:WfzQE3rX7v+kPrd3g8bECegpfTrLyHpdFn+r8oCS5h:WRmkPrtgcFearrLyHpdFn+r8oCS5
TLSH
T126C76C067FA12705C100C23E6023A370D635B1DF37ABAFE7A9D4D1B82E42579E7526B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_04e0d833b4cfaae3d6a26f0c1bb02934_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-07-11_04e0d833b4cfaae3d6a26f0c1bb02934_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar

.exe 51.2MB

2026-07-11_04e0d833b4cfaae3d6a26f0c1bb02934_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar

SHA256 ecd4d47fbd137b807b0de202ebea4a4327a1d1e0f7e5873961e7e5f1e4da3dd7
MD5 04e0d833b4cfaae3d6a26f0c1bb02934
SHA1 4cc0a3202ac57a5f56a8e0484eb874b89fed8aa8
SHA512 56510b317de14189822841a7749a67768574d64340be9d2a75e08193cd64fbbe777058230dcccd7ef4257adbe0193299fe5ea9bf6d8527b0a6061c07a2203e05
SSDEEP 196608:WfzQE3rX7v+kPrd3g8bECegpfTrLyHpdFn+r8oCS5h:WRmkPrtgcFearrLyHpdFn+r8oCS5
TLSH
T126C76C067FA12705C100C23E6023A370D635B1DF37ABAFE7A9D4D1B82E42579E7526B9
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5453104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

5.7MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

44.3MB

Virtual Size

45.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

171KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=13, id=259, version=27412,

count=213, id=261, version=27412,

count=5, id=199, version=41118,

count=153, id=261, version=29118,

count=19, id=260, version=29118,

count=10, id=259, version=29118,

count=28, id=260, version=27412,

count=9, id=261, productName=VS2019 v16.10.3 build 30038, version=30038,

count=31, productName=Unmarked objects (old),

count=561, id=260, productName=VS2017 v15.8.0 build 26726, version=26726,

count=3, id=203, productName=VS2012 build 50727, version=50727,

count=22, id=257, version=27412,

count=330, id=1, productName=Unmarked objects,

count=121, id=260, productName=VS2019 v16.8.5 build 29337, version=29337,

count=65, id=261, productName=VS2019 v16.8.5 build 29337, version=29337,

count=1, id=255, productName=VS2019 v16.8.5 build 29337, version=29337,

count=1, id=258, productName=VS2019 v16.8.5 build 29337, version=29337,

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_04e0d833b4cfaae3d6a26f0c1bb02934_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar

generic