General
- Target 2026-10-26_bf9787b500c0271f5ea67e6ab8bba3f2_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar
- Size 50.3MB
- Sample261027-jppsyssvbv
- SHA256 a311012e69d867af080c97ae780adf43822e301d0bdef5008e357e8b549450cb
- MD5 bf9787b500c0271f5ea67e6ab8bba3f2
- SHA1 1ba9069e5ba8cbe67e9483fa9f1168aa7f2b968b
- SHA512 42aa9e17e009fc00db06a1536e0211f5ba7ae79a1e19922a932d48d79792ac7f0cd8dedd5de299dba87285fd84f50f208ae0026e99d64bfb8105ffa93a3ac0f6
- SSDEEP 786432:6WS7hzK4pDQc042DEtNWvW4Rr0ftPMfZ7ZAa34tDa:61XpDz2DEOHZAyiDa
- TLSH T1ACC74953E2B11099E57AD0B886A35A23EA71BC090334B6EB9590FA752F33FE1577C704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-10-26_bf9787b500c0271f5ea67e6ab8bba3f2_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_bf9787b500c0271f5ea67e6ab8bba3f2_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_bf9787b500c0271f5ea67e6ab8bba3f2_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar
- Size 50.3MB
- SHA256 a311012e69d867af080c97ae780adf43822e301d0bdef5008e357e8b549450cb
- MD5 bf9787b500c0271f5ea67e6ab8bba3f2
- SHA1 1ba9069e5ba8cbe67e9483fa9f1168aa7f2b968b
- SHA512 42aa9e17e009fc00db06a1536e0211f5ba7ae79a1e19922a932d48d79792ac7f0cd8dedd5de299dba87285fd84f50f208ae0026e99d64bfb8105ffa93a3ac0f6
- SSDEEP 786432:6WS7hzK4pDQc042DEtNWvW4Rr0ftPMfZ7ZAa34tDa:61XpDz2DEOHZAyiDa
- TLSH T1ACC74953E2B11099E57AD0B886A35A23EA71BC090334B6EB9590FA752F33FE1577C704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables referencing virtualization MAC addresses
-
Loads dropped DLL
-
Checks whether UAC is enabled