General
- Target 2026-08-16_b2a4b00008fd3993d3c92ca6cd02bd89_akira_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_rusty-stealer_satacom_vidar
- Size 29.3MB
- Sample260816-efbshsba93
- SHA256 11a84674afd1118c3e0d644daa1b5fe20459a172ae847f337dc225acb877b75c
- MD5 b2a4b00008fd3993d3c92ca6cd02bd89
- SHA1 0f47299b91d6b178bd8104da3f6cf9800f4ee657
- SHA512 6971dad11bffd6d543b98465f791d0aadc94b036bf6a2cf95377ce3686ffb48c674b1c8cd0f9a216116a601bf168c40c9ca192a854308308a2f8e2b34c677b8c
- SSDEEP 393216:CDVZ1PaA6AqYYcvpgG+u6fb+SJ8aqq1CPwDvt3uFhCxcBbJ25HOBiLf0rh8MNPl+:CDVZ1PaA6AqYYcv2EiE6
- TLSH T1BC679D5577A4806AE86AE0B885474217E771BC662B3093DF30D9B27D2F33BE05B39784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b2a4b00008fd3993d3c92ca6cd02bd89_akira_blankgrabber_cobalt-strike_coinminer_glassworm_hij.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_b2a4b00008fd3993d3c92ca6cd02bd89_akira_blankgrabber_cobalt-strike_coinminer_glassworm_hij.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b2a4b00008fd3993d3c92ca6cd02bd89_akira_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_rusty-stealer_satacom_vidar
- Size 29.3MB
- SHA256 11a84674afd1118c3e0d644daa1b5fe20459a172ae847f337dc225acb877b75c
- MD5 b2a4b00008fd3993d3c92ca6cd02bd89
- SHA1 0f47299b91d6b178bd8104da3f6cf9800f4ee657
- SHA512 6971dad11bffd6d543b98465f791d0aadc94b036bf6a2cf95377ce3686ffb48c674b1c8cd0f9a216116a601bf168c40c9ca192a854308308a2f8e2b34c677b8c
- SSDEEP 393216:CDVZ1PaA6AqYYcvpgG+u6fb+SJ8aqq1CPwDvt3uFhCxcBbJ25HOBiLf0rh8MNPl+:CDVZ1PaA6AqYYcv2EiE6
- TLSH T1BC679D5577A4806AE86AE0B885474217E771BC662B3093DF30D9B27D2F33BE05B39784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger