General
- Target 2026-07-12_ca5f099b29a3908a8f45651f60512559_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom_vidar
- Size 12.9MB
- Sample260713-bpswlscy6t
- SHA256 e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592
- MD5 ca5f099b29a3908a8f45651f60512559
- SHA1 b4bb93d93be93d6f1f4ffe9785cdfe64e247078d
- SHA512 f8c2616deb49e2a7c650dfed81984eb8ad2d85deaa6b8ca11e6e488784fa9c3b5383c68b73c0034c4163cec71afa2ac22611554c0dc0f9f69516cf7521b4386e
- SSDEEP 196608:YjxaaIvDip9k0W48C1uWWm3SR41euQ4oa+DAN:YEami64JUWWmCLb4XH
- TLSH T130D64C03F67251DEC5FAC038962A7323F9B07CDD8634A76B469096622F71B24AE3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-12_ca5f099b29a3908a8f45651f60512559_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ca5f099b29a3908a8f45651f60512559_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ca5f099b29a3908a8f45651f60512559_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom_vidar
- Size 12.9MB
- SHA256 e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592
- MD5 ca5f099b29a3908a8f45651f60512559
- SHA1 b4bb93d93be93d6f1f4ffe9785cdfe64e247078d
- SHA512 f8c2616deb49e2a7c650dfed81984eb8ad2d85deaa6b8ca11e6e488784fa9c3b5383c68b73c0034c4163cec71afa2ac22611554c0dc0f9f69516cf7521b4386e
- SSDEEP 196608:YjxaaIvDip9k0W48C1uWWm3SR41euQ4oa+DAN:YEami64JUWWmCLb4XH
- TLSH T130D64C03F67251DEC5FAC038962A7323F9B07CDD8634A76B469096622F71B24AE3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.