General
- Target 2026-08-24_aff0aed6bdc94cad453a2b56896cbb73_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar
- Size 41.5MB
- Sample260825-em5deaswex
- SHA256 d8dfa11f5eb39b1777bd2bde20c5ebbb853a27b4c779067035ebafa4a40f3c75
- MD5 aff0aed6bdc94cad453a2b56896cbb73
- SHA1 c9f589d2fbe6b11fddeca3171cc3fe0c1bea1ef1
- SHA512 59f7ff9bf5104b460dbc366c1a21bc80a92ca3ae3acb0b572fc1dce8b4d62d26f3e96ae9928b5327fd37e1ed8c82ed7549d710e720507b7fd715eb833929ea78
- SSDEEP 393216:kQvzp0gqdPDaZq2VE2AcqwnQ3elMUFFSbLtvn9Ca/4tCi1CPwDvt3uFhCX0Fe9XR:kAzp0gWPDa82VE2AcqwnQ3elMUfJD26
- TLSH T127976B16B27110AAD96AD0B48A175163A770FC2A173067EB30D9B6791F33FE15E3C788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_aff0aed6bdc94cad453a2b56896cbb73_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_aff0aed6bdc94cad453a2b56896cbb73_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_aff0aed6bdc94cad453a2b56896cbb73_akira_cobalt-strike_coinminer_glassworm_hijackloader_pos_vidar
- Size 41.5MB
- SHA256 d8dfa11f5eb39b1777bd2bde20c5ebbb853a27b4c779067035ebafa4a40f3c75
- MD5 aff0aed6bdc94cad453a2b56896cbb73
- SHA1 c9f589d2fbe6b11fddeca3171cc3fe0c1bea1ef1
- SHA512 59f7ff9bf5104b460dbc366c1a21bc80a92ca3ae3acb0b572fc1dce8b4d62d26f3e96ae9928b5327fd37e1ed8c82ed7549d710e720507b7fd715eb833929ea78
- SSDEEP 393216:kQvzp0gqdPDaZq2VE2AcqwnQ3elMUFFSbLtvn9Ca/4tCi1CPwDvt3uFhCX0Fe9XR:kAzp0gWPDa82VE2AcqwnQ3elMUfJD26
- TLSH T127976B16B27110AAD96AD0B48A175163A770FC2A173067EB30D9B6791F33FE15E3C788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application