General
- Target 2026-07-23_04349d459b085b8c6f6ede77fe3087e0_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar
- Size 44.6MB
- Sample260723-lcgb6avdmd
- SHA256 60425b4249d7e283ffce825ddd108f89c80d002a15680c04313e8e9aef978eae
- MD5 04349d459b085b8c6f6ede77fe3087e0
- SHA1 593a6eaa37ce41f792136c13df6dbade43f077fc
- SHA512 dbae2ae3b5b867828274b7dfe187231e2f55575653bdfdf9545de26a8969c322cbafcaa000d5bca1d18d40f9837303f425d2b9e80bd7b619c2929286523f7f9e
- SSDEEP 786432:jN44C2hrw5DV02KMAcqwnQ3elMUNqix4:jNJwg27/4
- TLSH T14FA77C52B27150AAD96AD0B48A174163A770FC2A573076EB30D9B6392F33FE15E3C748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_04349d459b085b8c6f6ede77fe3087e0_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_04349d459b085b8c6f6ede77fe3087e0_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_04349d459b085b8c6f6ede77fe3087e0_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar
- Size 44.6MB
- SHA256 60425b4249d7e283ffce825ddd108f89c80d002a15680c04313e8e9aef978eae
- MD5 04349d459b085b8c6f6ede77fe3087e0
- SHA1 593a6eaa37ce41f792136c13df6dbade43f077fc
- SHA512 dbae2ae3b5b867828274b7dfe187231e2f55575653bdfdf9545de26a8969c322cbafcaa000d5bca1d18d40f9837303f425d2b9e80bd7b619c2929286523f7f9e
- SSDEEP 786432:jN44C2hrw5DV02KMAcqwnQ3elMUNqix4:jNJwg27/4
- TLSH T14FA77C52B27150AAD96AD0B48A174163A770FC2A573076EB30D9B6392F33FE15E3C748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.