General
- Target 2026-07-20_b05780c8417cab808672daffdbdc67a6_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- Sample260720-nfkvvsgs2l
- SHA256 c976396289af9532b8b448186334b9015bae6b80a0fe415a2245969f9ea5bbfc
- MD5 b05780c8417cab808672daffdbdc67a6
- SHA1 659313779e5956d3df457fda2ee19441e80c9c12
- SHA512 f51e629d6a6633c3bc27ee3ffe42ecd87005781659efa98d3cc9b14eb4773231c7090c973a9a6c6908cae58032fe74ad57392c58fe716a5b09f5bf3db9b3d7b3
- SSDEEP 98304:2h+Ico1pKsPW3sSJZszgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdQ0:uVr1I2WcqMjj7UlG8drCeqBvKCzcLu0
- TLSH T127C65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b05780c8417cab808672daffdbdc67a6_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b05780c8417cab808672daffdbdc67a6_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b05780c8417cab808672daffdbdc67a6_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- SHA256 c976396289af9532b8b448186334b9015bae6b80a0fe415a2245969f9ea5bbfc
- MD5 b05780c8417cab808672daffdbdc67a6
- SHA1 659313779e5956d3df457fda2ee19441e80c9c12
- SHA512 f51e629d6a6633c3bc27ee3ffe42ecd87005781659efa98d3cc9b14eb4773231c7090c973a9a6c6908cae58032fe74ad57392c58fe716a5b09f5bf3db9b3d7b3
- SSDEEP 98304:2h+Ico1pKsPW3sSJZszgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdQ0:uVr1I2WcqMjj7UlG8drCeqBvKCzcLu0
- TLSH T127C65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.