General
- Target 2026-08-05_5c50d47a6d78a304b9549e0120dbf483_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- Sample260805-cfwftatvfw
- SHA256 85d6ebf464700ca5c2c2b6e06975e2ea40e40429237c6062acf94afde25431ce
- MD5 5c50d47a6d78a304b9549e0120dbf483
- SHA1 00bd27e6b06324206fb422ae592c60263ea1b295
- SHA512 b973af5eda76f4c2c2c116d17b9dfe5760854554c33bae06c37f2d534c318d94c87cb2bf8dcf13df237119e19dbc2f8ef164a3813673994f6938604bcec20a0c
- SSDEEP 98304:Ah+vco1pKsPW3sSJZsfgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdLxT:MOr1I2WcqAjj7UlG8drCeqBvKCzcL/
- TLSH T19EC65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5c50d47a6d78a304b9549e0120dbf483_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5c50d47a6d78a304b9549e0120dbf483_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_5c50d47a6d78a304b9549e0120dbf483_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom
- Size 11.9MB
- SHA256 85d6ebf464700ca5c2c2b6e06975e2ea40e40429237c6062acf94afde25431ce
- MD5 5c50d47a6d78a304b9549e0120dbf483
- SHA1 00bd27e6b06324206fb422ae592c60263ea1b295
- SHA512 b973af5eda76f4c2c2c116d17b9dfe5760854554c33bae06c37f2d534c318d94c87cb2bf8dcf13df237119e19dbc2f8ef164a3813673994f6938604bcec20a0c
- SSDEEP 98304:Ah+vco1pKsPW3sSJZsfgajjXMgUlG8dr87GweHa7zlvKOZ5zv7gLdLxT:MOr1I2WcqAjj7UlG8drCeqBvKCzcL/
- TLSH T19EC65C1B62EC01DCD0FAD1B9C91B4903E675745A037183DF179086AA6FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.