General
- Target 2026-07-21_bd158b9a5377e5a0b59496895f9058ce_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_quasar-rat_rusty-stealer_satacom_vidar
- Size 45.1MB
- Sample260721-efj4wsfv9w
- SHA256 bf92bedffce2c2793e5d9d8d9b011febe227a46502e081f75a3edacdbe6334ef
- MD5 bd158b9a5377e5a0b59496895f9058ce
- SHA1 a8339519485fbdf5b4dd4873dc0bf6ae3e7a6dc8
- SHA512 ab9c96394248c0f5906fa349ebaeec6d757cd6d1cc9e787add7a8015b0f3217a8cef36a159769721579348e6439a9d5fc2aff8d5219e8e4fe41b349f865c4524
- SSDEEP 393216:f+vP3aVJjK328twPHZEwyxr+rs2NuDYV0LP1CPwDvt3uFhC4Sx8Fe9XbchMSqq7x:mXKVJjK328KPoqbVSqSj8Qm
- TLSH T1C4A79D0276644058E979C078C653B563DB397C6B17E062DB3298B2782FB3BE11F7EA44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-21_bd158b9a5377e5a0b59496895f9058ce_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_bd158b9a5377e5a0b59496895f9058ce_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_bd158b9a5377e5a0b59496895f9058ce_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_quasar-rat_rusty-stealer_satacom_vidar
- Size 45.1MB
- SHA256 bf92bedffce2c2793e5d9d8d9b011febe227a46502e081f75a3edacdbe6334ef
- MD5 bd158b9a5377e5a0b59496895f9058ce
- SHA1 a8339519485fbdf5b4dd4873dc0bf6ae3e7a6dc8
- SHA512 ab9c96394248c0f5906fa349ebaeec6d757cd6d1cc9e787add7a8015b0f3217a8cef36a159769721579348e6439a9d5fc2aff8d5219e8e4fe41b349f865c4524
- SSDEEP 393216:f+vP3aVJjK328twPHZEwyxr+rs2NuDYV0LP1CPwDvt3uFhC4Sx8Fe9XbchMSqq7x:mXKVJjK328KPoqbVSqSj8Qm
- TLSH T1C4A79D0276644058E979C078C653B563DB397C6B17E062DB3298B2782FB3BE11F7EA44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL