Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/09/2026, 16:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 30.6MB
- Sample260928-twdpdaybmd
- SHA256 7ea2c77ed12e1be011c5a1888975b8ede2abfa24f9e8c42e6a172c0ad1b8bdd8
- MD5 41b393dc07b42b66b8b78b4d8ea57aa8
- SHA1 ef6f92c746d09d70a5f4c10131fd734ec9ec5c8e
- SHA512 cd2f3227842a7825537e3aaa469b959687e8168e2b3d78de3563621768e50007eee69150a49115e4866df21630e63901fe0bcb60c6198a1058e5d2c34ddf96f0
- SSDEEP 393216:d1xb6zIUdhKmuCFswovZfl3P101W9u+EpDIdwovZfl3P10mwl:i3Gfl+1W90Dafl+m
- TLSH T19367F0D975E801FCC0668178C2425AA7F2B1788A4BB44BEB3F8545611F33ED4CDBAB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
pid Process 2036 2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe 2036 2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-28_41b393dc07b42b66b8b78b4d8ea57aa8_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2036