General
- Target 2026-07-17_afd9a821d54a35ab2de839e5779d0fb4_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- Sample260718-czacpadt8q
- SHA256 95d1d00366a98a53c912edfd5e697c5777593d69b587ab0c760329e6df26110d
- MD5 afd9a821d54a35ab2de839e5779d0fb4
- SHA1 0b9fba28fd2c4551f90bec68eb0b21d80c5167c2
- SHA512 9985af479a86136d9a00348a8315d67ba7be439537844a936a791388c22e191375cf42fe34e93a603d0105d7b833d651fbfe68227431bae7ec92ee16e0f21ce9
- SSDEEP 98304:KRLzdimo/v5L9JF+efdv4akKu/v1sufznJbfzDDzL0DVlu6dZWj:KR2L3dvvkKu/v1s6znJbf/DPWk6dZs
- TLSH T19096BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_afd9a821d54a35ab2de839e5779d0fb4_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_afd9a821d54a35ab2de839e5779d0fb4_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_afd9a821d54a35ab2de839e5779d0fb4_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 9.0MB
- SHA256 95d1d00366a98a53c912edfd5e697c5777593d69b587ab0c760329e6df26110d
- MD5 afd9a821d54a35ab2de839e5779d0fb4
- SHA1 0b9fba28fd2c4551f90bec68eb0b21d80c5167c2
- SHA512 9985af479a86136d9a00348a8315d67ba7be439537844a936a791388c22e191375cf42fe34e93a603d0105d7b833d651fbfe68227431bae7ec92ee16e0f21ce9
- SSDEEP 98304:KRLzdimo/v5L9JF+efdv4akKu/v1sufznJbfzDDzL0DVlu6dZWj:KR2L3dvvkKu/v1s6znJbf/DPWk6dZs
- TLSH T19096BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE