General
- Target 2026-06-02_6fa7fecd4112982812e00cbbead30a1c_akira_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 34.1MB
- Sample260602-phqdsses4p
- SHA256 7e7c1313ebfd6c1a6bd91e6439525a168045da314db860ff23de98fe7a763a9e
- MD5 6fa7fecd4112982812e00cbbead30a1c
- SHA1 883f24b65006036955fe16ac07cbb0f70ee4d0f1
- SHA512 c391cc43e77c57e2ce1fff8242ad3bd0400d7ac3e26f9306144e972e4a50d685f4efbbcb0d26379676a6efd48e808107c946dd91d134042087c52eaab699e8df
- SSDEEP 393216:rTfd8gho7/nPavS8wTkJrJVauYjP7AsNZCRPuU8:fF8dnPavStirJghjrD0b8
- TLSH T17A776C03BE8618A9D09DC474834B46639A617CDB0B3AB9FF25C535252F7EAF05B3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_6fa7fecd4112982812e00cbbead30a1c_akira_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_6fa7fecd4112982812e00cbbead30a1c_akira_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_6fa7fecd4112982812e00cbbead30a1c_akira_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 34.1MB
- SHA256 7e7c1313ebfd6c1a6bd91e6439525a168045da314db860ff23de98fe7a763a9e
- MD5 6fa7fecd4112982812e00cbbead30a1c
- SHA1 883f24b65006036955fe16ac07cbb0f70ee4d0f1
- SHA512 c391cc43e77c57e2ce1fff8242ad3bd0400d7ac3e26f9306144e972e4a50d685f4efbbcb0d26379676a6efd48e808107c946dd91d134042087c52eaab699e8df
- SSDEEP 393216:rTfd8gho7/nPavS8wTkJrJVauYjP7AsNZCRPuU8:fF8dnPavStirJghjrD0b8
- TLSH T17A776C03BE8618A9D09DC474834B46639A617CDB0B3AB9FF25C535252F7EAF05B3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.