General
- Target 2026-09-30_696a63d513cd53d7bfddfefba74840a0_akira_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 24.2MB
- Sample260930-ms1w6s1bnd
- SHA256 254b071260c4edcb3dea4097157f2a68484d48e09ad8731d8cc993b11a04c9b6
- MD5 696a63d513cd53d7bfddfefba74840a0
- SHA1 6980d7bb3a07f65b3ba3a0aa3b5e6eb464b2c558
- SHA512 ad6f3524df563a16a70384cd28bd7014399a0980d420e3b3c58d79de746d82925093b51a63f402ab6c1fb556d2510255797ac75bdd8d4506272f9ae9db0d14a3
- SSDEEP 786432:T/yZ/K0ttYZTsyZ/K0ttYZTVp1tqKjVzk:T6Z/K0ttYR3Z/K0ttYRVp1tqK5zk
- TLSH T1EA476B17B2E800E8D0AAD178CE264622E7727C5947F192DF2250B6D52F77AE0BE3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_696a63d513cd53d7bfddfefba74840a0_akira_amadey_cobalt-strike_coinminer_elex_emotet_glasswo.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_696a63d513cd53d7bfddfefba74840a0_akira_amadey_cobalt-strike_coinminer_elex_emotet_glasswo.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_696a63d513cd53d7bfddfefba74840a0_akira_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 24.2MB
- SHA256 254b071260c4edcb3dea4097157f2a68484d48e09ad8731d8cc993b11a04c9b6
- MD5 696a63d513cd53d7bfddfefba74840a0
- SHA1 6980d7bb3a07f65b3ba3a0aa3b5e6eb464b2c558
- SHA512 ad6f3524df563a16a70384cd28bd7014399a0980d420e3b3c58d79de746d82925093b51a63f402ab6c1fb556d2510255797ac75bdd8d4506272f9ae9db0d14a3
- SSDEEP 786432:T/yZ/K0ttYZTsyZ/K0ttYZTVp1tqKjVzk:T6Z/K0ttYR3Z/K0ttYRVp1tqK5zk
- TLSH T1EA476B17B2E800E8D0AAD178CE264622E7727C5947F192DF2250B6D52F77AE0BE3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.