General
- Target 2026-08-04_e1243cd32e991a8cc2264a1a30e967ce_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_megazord_njrat_remcos_rusty-stealer_ryuk_stealc_zxxz
- Size 96.7MB
- Sample260804-q56vqssbla
- SHA256 75da18075bfe7bec1b876fe3c32be9f42656356ae548652a30bd66c40b8bd36c
- MD5 e1243cd32e991a8cc2264a1a30e967ce
- SHA1 7f60adb6fa7178aef1951370d3193c21ed7cb749
- SHA512 7348a00b0ed01b1523cd774ae7c2aa54518319bbea4b1c105c076b832ffd611904b6ee35c18c6df86df3621a29825439331d80c1967b5f6067acaa5f92a5c876
- SSDEEP 786432:8f7hYg8vYVyahXJyMF6d9MdllFrd1mdG7ehUJ5KrI:8Tb+YVyaPyMNdllFrCW5KrI
- TLSH T13B287D13B3E70495E8BBDA7096E751236932BC066F3485DF324C47261F73AE09A7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_e1243cd32e991a8cc2264a1a30e967ce_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_meg.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_e1243cd32e991a8cc2264a1a30e967ce_akira_coinminer_gazer_glassworm_helldown_icedid_jaff_megazord_njrat_remcos_rusty-stealer_ryuk_stealc_zxxz
- Size 96.7MB
- SHA256 75da18075bfe7bec1b876fe3c32be9f42656356ae548652a30bd66c40b8bd36c
- MD5 e1243cd32e991a8cc2264a1a30e967ce
- SHA1 7f60adb6fa7178aef1951370d3193c21ed7cb749
- SHA512 7348a00b0ed01b1523cd774ae7c2aa54518319bbea4b1c105c076b832ffd611904b6ee35c18c6df86df3621a29825439331d80c1967b5f6067acaa5f92a5c876
- SSDEEP 786432:8f7hYg8vYVyahXJyMF6d9MdllFrd1mdG7ehUJ5KrI:8Tb+YVyaPyMNdllFrCW5KrI
- TLSH T13B287D13B3E70495E8BBDA7096E751236932BC066F3485DF324C47261F73AE09A7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.