General
- Target 2026-08-10_d02936591d0320754e48700d4edb8540_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.3MB
- Sample260810-3gqvtsbb85
- SHA256 2de7d3bd00d3ce068e385857fbb817802fba73037c0c60f708e9369506fa50a1
- MD5 d02936591d0320754e48700d4edb8540
- SHA1 19892aa100f5daab024ffe28af3223e83eb4ee7c
- SHA512 7e27ac203d5be7664c52ac534ef08a62ebb411e420e88ca02968e534c92c757eb69e958085aedfdc9fd62a0fce90d134ad38dfc9336b066f494ddf0fadcf4b0d
- SSDEEP 196608:/Tun686Yu0ywoPnG0MFb+GLsXPV9WzZVp:/S6JYu0ywoPnFs+wsX7Ybp
- TLSH T18BE65B1A22A802D8E1B7D27CCA96DA07D6F27D154F21C7CF06A46B5A0F33AD44D7A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d02936591d0320754e48700d4edb8540_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d02936591d0320754e48700d4edb8540_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.3MB
- SHA256 2de7d3bd00d3ce068e385857fbb817802fba73037c0c60f708e9369506fa50a1
- MD5 d02936591d0320754e48700d4edb8540
- SHA1 19892aa100f5daab024ffe28af3223e83eb4ee7c
- SHA512 7e27ac203d5be7664c52ac534ef08a62ebb411e420e88ca02968e534c92c757eb69e958085aedfdc9fd62a0fce90d134ad38dfc9336b066f494ddf0fadcf4b0d
- SSDEEP 196608:/Tun686Yu0ywoPnG0MFb+GLsXPV9WzZVp:/S6JYu0ywoPnFs+wsX7Ybp
- TLSH T18BE65B1A22A802D8E1B7D27CCA96DA07D6F27D154F21C7CF06A46B5A0F33AD44D7A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory