General
- Target 2026-08-10_a28c1e39ef47f57176dd61a02d078392_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.3MB
- Sample260810-3m18rabc35
- SHA256 02225e265693ff0d95e75b5433ae8139ba0677b5731e302d417865cb3fad2289
- MD5 a28c1e39ef47f57176dd61a02d078392
- SHA1 751e114761d220dd6a35be9f925daebce58ebc37
- SHA512 778300873579eb00a0f3b82d1fd53ce5abc1e35d55b82f777ec9146befd21b21843cbbcbab4211f93aa1cb5b7e94f28efc710d8598b783075bcead696f55824b
- SSDEEP 196608:7Tun686Yu0ywoPnG0MFbGGLsXPV9WzZ4F9:7S6JYu0ywoPnFsGwsX7Y69
- TLSH T194E65B1A22A802D8E1B7D27CCA96DA07D6F27D154F21C7CF06A46B5A0F33AD44D7A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_a28c1e39ef47f57176dd61a02d078392_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_a28c1e39ef47f57176dd61a02d078392_akira_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.3MB
- SHA256 02225e265693ff0d95e75b5433ae8139ba0677b5731e302d417865cb3fad2289
- MD5 a28c1e39ef47f57176dd61a02d078392
- SHA1 751e114761d220dd6a35be9f925daebce58ebc37
- SHA512 778300873579eb00a0f3b82d1fd53ce5abc1e35d55b82f777ec9146befd21b21843cbbcbab4211f93aa1cb5b7e94f28efc710d8598b783075bcead696f55824b
- SSDEEP 196608:7Tun686Yu0ywoPnG0MFbGGLsXPV9WzZ4F9:7S6JYu0ywoPnFsGwsX7Y69
- TLSH T194E65B1A22A802D8E1B7D27CCA96DA07D6F27D154F21C7CF06A46B5A0F33AD44D7A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1