Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
06/03/2026, 04:35
General
- Target 2026-03-06_74f1595444264dfcf899e5539d2efb52_akira_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe
- Size 6.1MB
- Sample260306-e7485sez7l
- SHA256 04ec8e1b58fddff2e46a9f61b5cc9270e6b1f74e89ee5f3b1a9c5d55ad2f1d27
Score
10/10
Malware Config
Signatures
- Detect Fabookie payload 1 IoCs
- Fabookie
Fabookie is facebook account info stealer.
- Fabookie family
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
- Detects executables packed with VMProtect. 1 IoCs
- VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-03-06_74f1595444264dfcf899e5539d2efb52_akira_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-03-06_74f1595444264dfcf899e5539d2efb52_akira_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4392-0-0x0000000140000000-0x0000000140618000-memory.dmp