General
- Target 2026-07-12_81972feaf3e675457cc593e196c4d598_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- Sample260712-k3wdbsft2q
- SHA256 0bcc2c02fea3a6bf6e6a04de9e57da33cd9e07be31e2b88bf16c0b03591797c8
- MD5 81972feaf3e675457cc593e196c4d598
- SHA1 33bea0215098be9f1f6a57c15fb11a790f650336
- SHA512 c83dc506ef22f068c111f2b92fe123122dd5c4b5b5c576e51d2cee9e4b8daf5d3122b25574f475f9f6f01bded7ae873f2346ab56a644e86666bac3c3e956fe74
- SSDEEP 98304:KRLzdimo/v5L9JY+ecdv4akKu/v1sufznJbfzDqzL0DVlu6dZWjq:KR2OEdvvkKu/v1s6znJbf/qPWk6dZsq
- TLSH T15196BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-12_81972feaf3e675457cc593e196c4d598_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_81972feaf3e675457cc593e196c4d598_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_81972feaf3e675457cc593e196c4d598_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- SHA256 0bcc2c02fea3a6bf6e6a04de9e57da33cd9e07be31e2b88bf16c0b03591797c8
- MD5 81972feaf3e675457cc593e196c4d598
- SHA1 33bea0215098be9f1f6a57c15fb11a790f650336
- SHA512 c83dc506ef22f068c111f2b92fe123122dd5c4b5b5c576e51d2cee9e4b8daf5d3122b25574f475f9f6f01bded7ae873f2346ab56a644e86666bac3c3e956fe74
- SSDEEP 98304:KRLzdimo/v5L9JY+ecdv4akKu/v1sufznJbfzDqzL0DVlu6dZWjq:KR2OEdvvkKu/v1s6znJbf/qPWk6dZsq
- TLSH T15196BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE