General
- Target 2026-01-10_9efb0ef7b7e17014d4879d06c9337c4b_akira_cobalt-strike_glassworm_icedid_vidar
- Size 6.4MB
- Sample260110-ghyfeafs6b
- SHA256 608b3a079e79f78ffab2972007bead28467253bb98c9aa517a378ee277806b17
- MD5 9efb0ef7b7e17014d4879d06c9337c4b
- SHA1 de841f854e9aa27f7ba3b3580e8633bacdc0cc4b
- SHA512 d56876cd8d7cd7fde61cb112842de722cbe1c6b2ed95db69b9b57505c1883595d4ddd611a8708b0bf1b07292931898cacaf255142385a51b59a4115de477c608
- SSDEEP 49152:bIJixbKNhhwH+ZxIl3cj3+g4UwZL+ms/H8ukwzhpYpx5jHzGalNm0pFx0E+Tni4v:bIbPlX/c8YFCoCiMBn+/+Jp
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2026-01-10_9efb0ef7b7e17014d4879d06c9337c4b_akira_cobalt-strike_glassworm_icedid_vidar.exe
Resource
win10v2004-20251231-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-01-10_9efb0ef7b7e17014d4879d06c9337c4b_akira_cobalt-strike_glassworm_icedid_vidar
- Size 6.4MB
- SHA256 608b3a079e79f78ffab2972007bead28467253bb98c9aa517a378ee277806b17
- MD5 9efb0ef7b7e17014d4879d06c9337c4b
- SHA1 de841f854e9aa27f7ba3b3580e8633bacdc0cc4b
- SHA512 d56876cd8d7cd7fde61cb112842de722cbe1c6b2ed95db69b9b57505c1883595d4ddd611a8708b0bf1b07292931898cacaf255142385a51b59a4115de477c608
- SSDEEP 49152:bIJixbKNhhwH+ZxIl3cj3+g4UwZL+ms/H8ukwzhpYpx5jHzGalNm0pFx0E+Tni4v:bIbPlX/c8YFCoCiMBn+/+Jp
- MD5 SHA1 SHA512 SSDEEP
-
Chaosbot family
-
Detects ChaosBot payload.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.