General
- Target 2026-07-20_3f99c6d7a7614a8f18f5762ec8c90784_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 8.9MB
- Sample260720-wfkh4abz7s
- SHA256 b7edaa40696443ea01303af4b46fa8f2aa64773cb8846c8fbf86b6b8ec99b0a1
- MD5 3f99c6d7a7614a8f18f5762ec8c90784
- SHA1 efb7c42ab7c72f4ab61b0e05f41afe9e9149969f
- SHA512 fed21c558b3f316b2855c25190acdf27b256d11b127519db70b9720ce1c1156cd3717cc3c00aa76f7c2a190aaf7f66ed59a8542553eb69eeda2d0ce009437dd1
- SSDEEP 98304:KRLzdimo/v5L9Pm+ecdv4OkKu/vhsufznJbffDqzLVDVlu6dZWq:KR2eEdvrkKu/vhs6znJbfrqPzk6dZH
- TLSH T13196BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3f99c6d7a7614a8f18f5762ec8c90784_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3f99c6d7a7614a8f18f5762ec8c90784_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_ice.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3f99c6d7a7614a8f18f5762ec8c90784_akira_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_njrat_remcos_vidar_wannacry
- Size 8.9MB
- SHA256 b7edaa40696443ea01303af4b46fa8f2aa64773cb8846c8fbf86b6b8ec99b0a1
- MD5 3f99c6d7a7614a8f18f5762ec8c90784
- SHA1 efb7c42ab7c72f4ab61b0e05f41afe9e9149969f
- SHA512 fed21c558b3f316b2855c25190acdf27b256d11b127519db70b9720ce1c1156cd3717cc3c00aa76f7c2a190aaf7f66ed59a8542553eb69eeda2d0ce009437dd1
- SSDEEP 98304:KRLzdimo/v5L9Pm+ecdv4OkKu/vhsufznJbffDqzLVDVlu6dZWq:KR2eEdvrkKu/vhs6znJbfrqPzk6dZH
- TLSH T13196BE86A7F201E4D6B7C13896422227F6B27C55833097DB6AD85B2E0F737E0997E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE