General

  • Target
    2026-08-08_1b6162e3819caa7e8ef5897e28de3513_akira_cobalt-strike_glassworm_icedid
  • Size 33.2MB
  • Sample260808-eldt3aszc1
  • SHA256 b8738a4eddaa9c553003f3ea20c17a31dc90e5fe703f427962acd59af0029ed3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-08_1b6162e3819caa7e8ef5897e28de3513_akira_cobalt-strike_glassworm_icedid
    .exe 33.2MB

2026-08-08_1b6162e3819caa7e8ef5897e28de3513_akira_cobalt-strike_glassworm_icedid

  • IMPHASH f4757f61f2855da75a2b269b01ff2338
  • SHA256 b8738a4eddaa9c553003f3ea20c17a31dc90e5fe703f427962acd59af0029ed3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing URLs to raw contents of a Github gist

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
27814160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths
zeroclaw.pdb