General
- Target 2026-08-02_ee71490b7cdbf65d074b2da77941bd70_akira_blankgrabber_cobalt-strike_coinminer_darkgate_gcleaner_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 15.3MB
- Sample260802-3e5wzatdld
- SHA256 9363960634624f8f80222a6e75f117d843b8b74345640839abbc39cadd9e9a2d
- MD5 ee71490b7cdbf65d074b2da77941bd70
- SHA1 e63905b2d8b7df08f36ff9ddd3379e10059e53fe
- SHA512 bb8782df624f2e0f9ca2172d062ac882525aaabdf2ac7a7a8029a678988c8b584528aed8a574d254cd307c4e6bd4fe1b079f29ff45bd3394873f9a2e1547228b
- SSDEEP 393216:qosWXzNz/lSc3zC9bU8pzlT4EcDHoC6xfn:qiXzN/ifn
- TLSH T1DEF6BF2AF2B800D9D4BBC178C9969617E772781913F047DB269496E91F23BE07E3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_ee71490b7cdbf65d074b2da77941bd70_akira_blankgrabber_cobalt-strike_coinminer_darkgate_gcle.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
aurotun
Campaign
-
728loa
C2
-
80.64.19.132:7712
Attributes
-
anti_dbg
false
-
anti_sandbox
false
-
aurotun
true
-
disable_mutex
false
-
kx_pk
hRz4qVsNDZgbtvnqwUg693UNhHzfX/z5tBCQ4+yqnDw=
-
priviledge_escalation
true
-
seal_pk
Ip5SbbMHCGL7wB9U9k06dAvkWm4IYyrMQeQgGKVsZDY=
-
sign_pk
/aMWDX+zo/MLnuuGnleZ2e8lJv6UL6n3FgpKUyKy+H8=
Targets
-
- Target 2026-08-02_ee71490b7cdbf65d074b2da77941bd70_akira_blankgrabber_cobalt-strike_coinminer_darkgate_gcleaner_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 15.3MB
- SHA256 9363960634624f8f80222a6e75f117d843b8b74345640839abbc39cadd9e9a2d
- MD5 ee71490b7cdbf65d074b2da77941bd70
- SHA1 e63905b2d8b7df08f36ff9ddd3379e10059e53fe
- SHA512 bb8782df624f2e0f9ca2172d062ac882525aaabdf2ac7a7a8029a678988c8b584528aed8a574d254cd307c4e6bd4fe1b079f29ff45bd3394873f9a2e1547228b
- SSDEEP 393216:qosWXzNz/lSc3zC9bU8pzlT4EcDHoC6xfn:qiXzN/ifn
- TLSH T1DEF6BF2AF2B800D9D4BBC178C9969617E772781913F047DB269496E91F23BE07E3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Aurotun stealer