General
- Target 2026-08-07_182bcbed6e6364c14eebcf669e69971f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 43.2MB
- Sample260807-ezlf3axdlf
- SHA256 b71b32215b074149aa189f15da59e95cb248585e21977413261ef867ca39b848
- MD5 182bcbed6e6364c14eebcf669e69971f
- SHA1 cb6e497174577f41ff8d71132564b13cb947b593
- SHA512 d60dfb83b48cda02efe2d8727c8144f9ec33678529b3f032388d4579b0b2d0873b054d8a2dd8494287eba40bea7bc8b7c7bbda15487b52b39fb50a58d7342730
- SSDEEP 393216:YCRuPmXDccB2uIwl4V4z2Gt1P+FSiAlvVdlIXCU4uM5Y9OLVhbb:YZUDhmFS72Z4T+u
- TLSH T112A71A115B4D8745D226BD3CD087460193F4BF88C32E8F1F9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_182bcbed6e6364c14eebcf669e69971f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_182bcbed6e6364c14eebcf669e69971f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_182bcbed6e6364c14eebcf669e69971f_akira_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 43.2MB
- SHA256 b71b32215b074149aa189f15da59e95cb248585e21977413261ef867ca39b848
- MD5 182bcbed6e6364c14eebcf669e69971f
- SHA1 cb6e497174577f41ff8d71132564b13cb947b593
- SHA512 d60dfb83b48cda02efe2d8727c8144f9ec33678529b3f032388d4579b0b2d0873b054d8a2dd8494287eba40bea7bc8b7c7bbda15487b52b39fb50a58d7342730
- SSDEEP 393216:YCRuPmXDccB2uIwl4V4z2Gt1P+FSiAlvVdlIXCU4uM5Y9OLVhbb:YZUDhmFS72Z4T+u
- TLSH T112A71A115B4D8745D226BD3CD087460193F4BF88C32E8F1F9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger