General
- Target 2026-07-27_d8e490eb470ef3b1e41849df38505caa_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_luca-stealer_njrat_remcos_rusty-stealer_stealc_zxxz
- Size 98.7MB
- Sample260728-ac5tzatemc
- SHA256 00b187eee74e47ba3174394867f33dbb3a0ca50e83d1d0023dde9f1d78568fce
- MD5 d8e490eb470ef3b1e41849df38505caa
- SHA1 a2d42d98f7c54c75d7ddb02fc8da856e22c630a9
- SHA512 5e482564a7d644a732478767241144540a1cf919b9a24f9709a4f681ec8bf8172d4d3710a93d0dd5cc783f63720c52e4422b0d02fd72e47826e0f895293699d8
- SSDEEP 786432:qMf7hYg8vYVyahXJyMF6d9MdllFrd1mdG7ehUJ5KE:9Tb+YVyaPyMNdllFrCW5KE
- TLSH T12A387D13B3A705D5E8BBDA7096E751236932BC066F3086DF324C47251F73AE09A7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-27_d8e490eb470ef3b1e41849df38505caa_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d8e490eb470ef3b1e41849df38505caa_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_luca-stealer_njrat_remcos_rusty-stealer_stealc_zxxz
- Size 98.7MB
- SHA256 00b187eee74e47ba3174394867f33dbb3a0ca50e83d1d0023dde9f1d78568fce
- MD5 d8e490eb470ef3b1e41849df38505caa
- SHA1 a2d42d98f7c54c75d7ddb02fc8da856e22c630a9
- SHA512 5e482564a7d644a732478767241144540a1cf919b9a24f9709a4f681ec8bf8172d4d3710a93d0dd5cc783f63720c52e4422b0d02fd72e47826e0f895293699d8
- SSDEEP 786432:qMf7hYg8vYVyahXJyMF6d9MdllFrd1mdG7ehUJ5KE:9Tb+YVyaPyMNdllFrCW5KE
- TLSH T12A387D13B3A705D5E8BBDA7096E751236932BC066F3086DF324C47251F73AE09A7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE