General
- Target 2026-07-11_1d61af5457faaa6f9fbc0c97a12fdcd5_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- Sample260711-ynp5nah19m
- SHA256 2a527f9d02b219d5775c1dd2cef4bb0e801264cf839350c56540fbbf81cdbcb5
- MD5 1d61af5457faaa6f9fbc0c97a12fdcd5
- SHA1 58ecc32a6bc8b922a5ec9d73ad4f98f1aa74fee5
- SHA512 5394858887dd35f1de2fba926d234b999234e5c68db476cfb4d2cc44cf7f747b9e4b590ae4bcb566b99d62acda582008861886c87168c0d39c88eb0e66e224df
- SSDEEP 98304:8h+Hco1pKsPW3sSJZsxgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdA+:Qur1I2Wcqqjj7UlG8drCeqBvKCzcLr
- TLSH T120C65C1B62EC01DCD0FAD1B9C91B4913E675745A037183DF179086AA2FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_1d61af5457faaa6f9fbc0c97a12fdcd5_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_1d61af5457faaa6f9fbc0c97a12fdcd5_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_1d61af5457faaa6f9fbc0c97a12fdcd5_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- SHA256 2a527f9d02b219d5775c1dd2cef4bb0e801264cf839350c56540fbbf81cdbcb5
- MD5 1d61af5457faaa6f9fbc0c97a12fdcd5
- SHA1 58ecc32a6bc8b922a5ec9d73ad4f98f1aa74fee5
- SHA512 5394858887dd35f1de2fba926d234b999234e5c68db476cfb4d2cc44cf7f747b9e4b590ae4bcb566b99d62acda582008861886c87168c0d39c88eb0e66e224df
- SSDEEP 98304:8h+Hco1pKsPW3sSJZsxgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdA+:Qur1I2Wcqqjj7UlG8drCeqBvKCzcLr
- TLSH T120C65C1B62EC01DCD0FAD1B9C91B4913E675745A037183DF179086AA2FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.