General
- Target 2026-06-28_5cb119f2aff2a02c7121078001af6f33_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.9MB
- Sample260628-19n6laft4y
- SHA256 13d11476b71ab21e4ed5a8b13a49acf278827d1eecc17b2c67f514859183c276
- MD5 5cb119f2aff2a02c7121078001af6f33
- SHA1 209c5edae02b2f21cc63e77b51c205334a9a9c50
- SHA512 bad79d7be10e879aee4d3bc75ba77ce520fca7c42555ee131144eb4f6d6042f64890acd276fd289e4a40ae35097d55ce059732911f837439a79c413297e917f0
- SSDEEP 49152:RDHhbApj0Jg18MAFpnnJH9BUfKn+95lRVfAa0Vg76Lo2E2T8avTl2y/Bw:th8pj0RMA3vBUGHo+m
- TLSH T1AE166A03B19544E9D189C130CE06C132DF62BC9A5BF165EF36A4B72A6E73AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_5cb119f2aff2a02c7121078001af6f33_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_5cb119f2aff2a02c7121078001af6f33_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260618-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_5cb119f2aff2a02c7121078001af6f33_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.9MB
- SHA256 13d11476b71ab21e4ed5a8b13a49acf278827d1eecc17b2c67f514859183c276
- MD5 5cb119f2aff2a02c7121078001af6f33
- SHA1 209c5edae02b2f21cc63e77b51c205334a9a9c50
- SHA512 bad79d7be10e879aee4d3bc75ba77ce520fca7c42555ee131144eb4f6d6042f64890acd276fd289e4a40ae35097d55ce059732911f837439a79c413297e917f0
- SSDEEP 49152:RDHhbApj0Jg18MAFpnnJH9BUfKn+95lRVfAa0Vg76Lo2E2T8avTl2y/Bw:th8pj0RMA3vBUGHo+m
- TLSH T1AE166A03B19544E9D189C130CE06C132DF62BC9A5BF165EF36A4B72A6E73AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1