General
- Target 2026-08-03_86514426eabb885005ef8007d9fa2843_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_rusty-stealer_vidar
- Size 76.2MB
- Sample260803-zn6cbabp31
- SHA256 115a4ccbe6205c428d6d4e956c9d91a0cb5d398f4d5af6beda4da43c4bd848d5
- MD5 86514426eabb885005ef8007d9fa2843
- SHA1 88e02bd372b42840ca3f25d2025f6e23e6054d2f
- SHA512 c0cdef085ec0e965dc9ff2deea739f794f8026a87aa10eb5af0eb0d5883cbd758f1644343cd6aa9e8a532ab2683abfdaefafae818b5b3e0459f148bc22edc28f
- SSDEEP 1572864:zDnVkgLIwviIYUs8okf7vLWD2aONON0F/Lfaxv3FKWtC4X102cjjgKYehV1Yk:HnVkgLB6Q3oo6D2aIOCLfOvAWzXjggKP
- TLSH T199083317F69585A9C0AEC275C7074627EBB2BCCA0730E36B67980A763F53B605E2D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_86514426eabb885005ef8007d9fa2843_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_rusty-stealer_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_86514426eabb885005ef8007d9fa2843_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_rusty-stealer_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_86514426eabb885005ef8007d9fa2843_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_rusty-stealer_vidar
- Size 76.2MB
- SHA256 115a4ccbe6205c428d6d4e956c9d91a0cb5d398f4d5af6beda4da43c4bd848d5
- MD5 86514426eabb885005ef8007d9fa2843
- SHA1 88e02bd372b42840ca3f25d2025f6e23e6054d2f
- SHA512 c0cdef085ec0e965dc9ff2deea739f794f8026a87aa10eb5af0eb0d5883cbd758f1644343cd6aa9e8a532ab2683abfdaefafae818b5b3e0459f148bc22edc28f
- SSDEEP 1572864:zDnVkgLIwviIYUs8okf7vLWD2aONON0F/Lfaxv3FKWtC4X102cjjgKYehV1Yk:HnVkgLB6Q3oo6D2aIOCLfOvAWzXjggKP
- TLSH T199083317F69585A9C0AEC275C7074627EBB2BCCA0730E36B67980A763F53B605E2D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables using Telegram Chat Bot
-
UPX dump on OEP (original entry point)