General
- Target 2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_qilin_rusty-stealer_satacom
- Size 10.2MB
- Sample261102-ybcc2agb84
- SHA256 27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc
- MD5 e7fba385298c6a09de2ed36dee523d17
- SHA1 bf24eb9d50ae1f9da179150113ee3c0135fc3c55
- SHA512 6a5113ce01d1b4e01c83efeb04fed9e1b50f589128b30b76a4c1777f13c60bf5903ee5dae90c4cd011828c39cd19098cc8219aa0a4368cca745b1432b06274c9
- SSDEEP 98304:/H9DGHU7dlw9Ahji5c4LZa/AFptlYsQBOqUk+Wtzv8bTahPaxp81:fFGLR9QggtzUbOExq1
- TLSH T147B65B02BA6F54ECD59BC47483068A239E2174DB0B36BAEF418446393F6ABF05B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_qilin_rusty-stealer_satacom
- Size 10.2MB
- SHA256 27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc
- MD5 e7fba385298c6a09de2ed36dee523d17
- SHA1 bf24eb9d50ae1f9da179150113ee3c0135fc3c55
- SHA512 6a5113ce01d1b4e01c83efeb04fed9e1b50f589128b30b76a4c1777f13c60bf5903ee5dae90c4cd011828c39cd19098cc8219aa0a4368cca745b1432b06274c9
- SSDEEP 98304:/H9DGHU7dlw9Ahji5c4LZa/AFptlYsQBOqUk+Wtzv8bTahPaxp81:fFGLR9QggtzUbOExq1
- TLSH T147B65B02BA6F54ECD59BC47483068A239E2174DB0B36BAEF418446393F6ABF05B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Executes dropped EXE
-
Adds Run key to start application