General
- Target 2026-08-06_8343816887ec8980a84c0990669b9506_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar
- Size 484KB
- Sample260806-2w77zssdnf
- SHA256 b97c832a6aea76848d303b3f50964d38f85e640274f6a7cf9a8d7add5ddb55f1
- MD5 8343816887ec8980a84c0990669b9506
- SHA1 35b3eca2e670bdffcc8927a382ffbbc947a4f509
- SHA512 69140e3c0789ecab9c90b18c1bb74b86475e20c97b2210e0f27df40c25da37e4d32e213424f478c7ff15ffef44d449670f016f0a66f9bccf8f33cbf2fc2d25b3
- SSDEEP 6144:ZJMKMcraUbBa3hP7xsO32N4Z1yYW0IOJsOeE74FBohwMLceHmedd6r:3ME1Ba311s92tW06Bomu/r0
- TLSH T19EB47C16F76500F9E063D13C89939606E6727C1607718BEF2394E27A2F276E05F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-06_8343816887ec8980a84c0990669b9506_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_8343816887ec8980a84c0990669b9506_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_8343816887ec8980a84c0990669b9506_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar
- Size 484KB
- SHA256 b97c832a6aea76848d303b3f50964d38f85e640274f6a7cf9a8d7add5ddb55f1
- MD5 8343816887ec8980a84c0990669b9506
- SHA1 35b3eca2e670bdffcc8927a382ffbbc947a4f509
- SHA512 69140e3c0789ecab9c90b18c1bb74b86475e20c97b2210e0f27df40c25da37e4d32e213424f478c7ff15ffef44d449670f016f0a66f9bccf8f33cbf2fc2d25b3
- SSDEEP 6144:ZJMKMcraUbBa3hP7xsO32N4Z1yYW0IOJsOeE74FBohwMLceHmedd6r:3ME1Ba311s92tW06Bomu/r0
- TLSH T19EB47C16F76500F9E063D13C89939606E6727C1607718BEF2394E27A2F276E05F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Remote Services: SMB/Windows Admin Shares
Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).