General
- Target 2026-07-27_e97f60218ccd1df4e59c189abd3cbf7b_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_luca-stealer_njrat_remcos_rusty-stealer_stealc_zxxz
- Size 98.7MB
- Sample260727-2md8jsserg
- SHA256 8905b7149f8876bb1c837e4bcda254e279c59ae8667c76cff8c8c3e0fee74d1f
- MD5 e97f60218ccd1df4e59c189abd3cbf7b
- SHA1 b695e70a91d4b6ce7e7e37323282e1b911f41af8
- SHA512 54eb0b84ee6a833d1bf427732a1d3e521d27436f2ffbdb11249805afdb470e8e0953bfb044ba2e0452fc6667cc325e0e63721c9d078b4143990e8466f1f063d4
- SSDEEP 786432:Vqf7hYg8vYVyahXJyMF6d9MdllFrd1mdG7ehUJ5KE:MTb+YVyaPyMNdllFrCW5KE
- TLSH T191387D13B3A705D5E8BBDA7196E751236932BC066F3086DF324C47261F73AE05A7AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-27_e97f60218ccd1df4e59c189abd3cbf7b_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_luc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_e97f60218ccd1df4e59c189abd3cbf7b_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_luca-stealer_njrat_remcos_rusty-stealer_stealc_zxxz
- Size 98.7MB
- SHA256 8905b7149f8876bb1c837e4bcda254e279c59ae8667c76cff8c8c3e0fee74d1f
- MD5 e97f60218ccd1df4e59c189abd3cbf7b
- SHA1 b695e70a91d4b6ce7e7e37323282e1b911f41af8
- SHA512 54eb0b84ee6a833d1bf427732a1d3e521d27436f2ffbdb11249805afdb470e8e0953bfb044ba2e0452fc6667cc325e0e63721c9d078b4143990e8466f1f063d4
- SSDEEP 786432:Vqf7hYg8vYVyahXJyMF6d9MdllFrd1mdG7ehUJ5KE:MTb+YVyaPyMNdllFrCW5KE
- TLSH T191387D13B3A705D5E8BBDA7196E751236932BC066F3086DF324C47261F73AE05A7AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE