General
- Target 2026-07-14_6517517026b3f484bbcbda99c7d3c179_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- Sample260714-vfrfzaby2v
- SHA256 d4dce500e1113b3592bc3444d62f99cb0b052c21cc5e22bb08e4861cab4d2f61
- MD5 6517517026b3f484bbcbda99c7d3c179
- SHA1 b9c3eac7f8fa588accd32bcd28c55eddcf5a594c
- SHA512 376b26659059e1c2cb8d3f9a4cb35d5c335e2adff62869a812caad3c5be6d3dd54be323e8adcc370771bbeb8c55c877d7867cc87f8ead578889aa1e0ab0565c2
- SSDEEP 98304:KRLzdimo/v5L9JF+ecdv4akKu/v1sufznJbf+DDzL0DVlu6dZWjO:KR2LEdvvkKu/v1s6znJbfwDPWk6dZsO
- TLSH T12A96BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-14_6517517026b3f484bbcbda99c7d3c179_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_6517517026b3f484bbcbda99c7d3c179_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_6517517026b3f484bbcbda99c7d3c179_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- SHA256 d4dce500e1113b3592bc3444d62f99cb0b052c21cc5e22bb08e4861cab4d2f61
- MD5 6517517026b3f484bbcbda99c7d3c179
- SHA1 b9c3eac7f8fa588accd32bcd28c55eddcf5a594c
- SHA512 376b26659059e1c2cb8d3f9a4cb35d5c335e2adff62869a812caad3c5be6d3dd54be323e8adcc370771bbeb8c55c877d7867cc87f8ead578889aa1e0ab0565c2
- SSDEEP 98304:KRLzdimo/v5L9JF+ecdv4akKu/v1sufznJbf+DDzL0DVlu6dZWjO:KR2LEdvvkKu/v1s6znJbfwDPWk6dZsO
- TLSH T12A96BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE