General
- Target 2026-07-12_c61b81f3c1f07f08cfb2772a7e69ff87_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- Sample260712-nsdx3sg13m
- SHA256 48e016b8c3515fc3b1ce4c04b44f7b5818b9f874c88142355d4cd83712ea8c55
- MD5 c61b81f3c1f07f08cfb2772a7e69ff87
- SHA1 33759ff6510cb4371287425c5f25e64fa3391957
- SHA512 d39af093af5ecdefc5e8fe8577161ea0b59238b93926c76c29ad98576d09a0daebbac6fe501f69485b3059287fd140e7d41edb3e68fd3ba9f2fdc9254ddf8a71
- SSDEEP 98304:KRLzdimo/v5L9JF+efdv4akKu/v1sufznJbfzDDzL0DVlu6dZWj:KR2L3dvvkKu/v1s6znJbf/DPWk6dZs
- TLSH T15796BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-12_c61b81f3c1f07f08cfb2772a7e69ff87_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_c61b81f3c1f07f08cfb2772a7e69ff87_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_c61b81f3c1f07f08cfb2772a7e69ff87_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- SHA256 48e016b8c3515fc3b1ce4c04b44f7b5818b9f874c88142355d4cd83712ea8c55
- MD5 c61b81f3c1f07f08cfb2772a7e69ff87
- SHA1 33759ff6510cb4371287425c5f25e64fa3391957
- SHA512 d39af093af5ecdefc5e8fe8577161ea0b59238b93926c76c29ad98576d09a0daebbac6fe501f69485b3059287fd140e7d41edb3e68fd3ba9f2fdc9254ddf8a71
- SSDEEP 98304:KRLzdimo/v5L9JF+efdv4akKu/v1sufznJbfzDDzL0DVlu6dZWj:KR2L3dvvkKu/v1s6znJbf/DPWk6dZs
- TLSH T15796BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE