2026-04-15_d435e826f2a2a227d6d18017423b0418_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-15_d435e826f2a2a227d6d18017423b0418_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
Size 3.5MB
Sample260415-2kca6sdw91
SHA256 0115503906403dc9fa9bf5888fde9fb88b248bcf371bd7bb9b14a188ace196c0
MD5 d435e826f2a2a227d6d18017423b0418
SHA1 63725c59ee515a91a2eb4f784dddbc35932a461c
SHA512 41c4875eff556a1b628eedee8137618bc130113d0f8c6c9781ed0cb336c71eddf6ccd3bdde6130577c73f28a047076efc878d8cb5346c01cc59f47a6f97cc78f
SSDEEP 12288:iacSyqs+xAUKb2i1NM26gLRh1KKk7rPcr9CBTdPqXPdR/phR9TZkazdiY+qhG2zT:igyqs+k/0qD+qs2xd2YKniPJ9
TLSH
T1A8063CEDA17B50F6C4E65131699102C9DDB43650D26812EB437A0CA13B3FBFEC6ACE64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_d435e826f2a2a227d6d18017423b0418_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar

File Explorer

2026-04-15_d435e826f2a2a227d6d18017423b0418_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar

.exe 3.5MB

2026-04-15_d435e826f2a2a227d6d18017423b0418_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar

IMPHASH fc71fc5aec9eeefe0069b4ed0348da0d
SHA256 0115503906403dc9fa9bf5888fde9fb88b248bcf371bd7bb9b14a188ace196c0
MD5 d435e826f2a2a227d6d18017423b0418
SHA1 63725c59ee515a91a2eb4f784dddbc35932a461c
SHA512 41c4875eff556a1b628eedee8137618bc130113d0f8c6c9781ed0cb336c71eddf6ccd3bdde6130577c73f28a047076efc878d8cb5346c01cc59f47a6f97cc78f
SSDEEP 12288:iacSyqs+xAUKb2i1NM26gLRh1KKk7rPcr9CBTdPqXPdR/phR9TZkazdiY+qhG2zT:igyqs+k/0qD+qs2xd2YKniPJ9
TLSH
T1A8063CEDA17B50F6C4E65131699102C9DDB43650D26812EB437A0CA13B3FBFEC6ACE64
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45740

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle CompareStringEx CompareStringW CreateDirectoryA CreateEventW CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocalTime GetLocaleInfoEx GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

633KB

Virtual Size

632KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

92B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

424B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_d435e826f2a2a227d6d18017423b0418_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar

kernel32

generic