General
- Target 2026-07-27_973cc95c4a0b0f525d09b52c02a156c9_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- Sample260727-j32dxaywbs
- SHA256 4a497c2ab6ae87741d925e347430de861b744ba08e469992b213e770da2c6a8c
- MD5 973cc95c4a0b0f525d09b52c02a156c9
- SHA1 032c85ae0b6acf3a6ff80f5ce6e3dee8c12461b1
- SHA512 1a8c66b08198ed8b0cee998c3ecb737ad33ee641d14844371a26ddbea078077ac90e28bd0b95836ceb4cae8e749e4c4304bb7baac4bd1f4079996918131d9d77
- SSDEEP 98304:Rh+Kco1pKsPW3sSJZssgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLd4Sd:Hzr1I2Wcq1jj7UlG8drCeqBvKCzcLKSd
- TLSH T128C65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_973cc95c4a0b0f525d09b52c02a156c9_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_973cc95c4a0b0f525d09b52c02a156c9_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_973cc95c4a0b0f525d09b52c02a156c9_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- SHA256 4a497c2ab6ae87741d925e347430de861b744ba08e469992b213e770da2c6a8c
- MD5 973cc95c4a0b0f525d09b52c02a156c9
- SHA1 032c85ae0b6acf3a6ff80f5ce6e3dee8c12461b1
- SHA512 1a8c66b08198ed8b0cee998c3ecb737ad33ee641d14844371a26ddbea078077ac90e28bd0b95836ceb4cae8e749e4c4304bb7baac4bd1f4079996918131d9d77
- SSDEEP 98304:Rh+Kco1pKsPW3sSJZssgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLd4Sd:Hzr1I2Wcq1jj7UlG8drCeqBvKCzcLKSd
- TLSH T128C65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.