General
- Target 2026-07-29_182a66508b749764e448ce30d759e572_akira_cobalt-strike_coinminer_darkgate_elex_gcleaner_glassworm_hawkeye_icedid_njrat_remcos_stealc_vidar
- Size 18.5MB
- Sample260729-z57lpsshkg
- SHA256 487f3efa31e6acbbc459d91124c27c0a10149704d3628682d9bd45159eabd0f3
- MD5 182a66508b749764e448ce30d759e572
- SHA1 53fddf83a2be656bcb41bdadb91a2ffe1b2345cd
- SHA512 15b1ac58908d269d97c885e17e826c4f3948d1900a02e07b5f26b81a77057285cfb4ecf231bde25b2f445f2b3051f40bcb2b79481d16f0b6232397c04d80be17
- SSDEEP 393216:QJl2WUVQKu/v1LLMbf3qTRZsN9GcJgQXI3kUYt+x:QaWU6LMZNbqkj+x
- TLSH T13117DF57A6A602E4E5BBC13896526117F6B27C19433057CF3ADCAA1A2F33BE05D3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_182a66508b749764e448ce30d759e572_akira_cobalt-strike_coinminer_darkgate_elex_gcleaner_gla.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_182a66508b749764e448ce30d759e572_akira_cobalt-strike_coinminer_darkgate_elex_gcleaner_glassworm_hawkeye_icedid_njrat_remcos_stealc_vidar
- Size 18.5MB
- SHA256 487f3efa31e6acbbc459d91124c27c0a10149704d3628682d9bd45159eabd0f3
- MD5 182a66508b749764e448ce30d759e572
- SHA1 53fddf83a2be656bcb41bdadb91a2ffe1b2345cd
- SHA512 15b1ac58908d269d97c885e17e826c4f3948d1900a02e07b5f26b81a77057285cfb4ecf231bde25b2f445f2b3051f40bcb2b79481d16f0b6232397c04d80be17
- SSDEEP 393216:QJl2WUVQKu/v1LLMbf3qTRZsN9GcJgQXI3kUYt+x:QaWU6LMZNbqkj+x
- TLSH T13117DF57A6A602E4E5BBC13896526117F6B27C19433057CF3ADCAA1A2F33BE05D3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects KawaiiUnicorn
-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE