General

  • Target
    2026-06-27_a1a3b10a2df7bd01b8967251871a93e2_akira_cobalt-strike_glassworm_icedid_luca-stealer_megazord_njrat_quasar-rat_rusty-stealer_satacom_vidar
  • Size 25.6MB
  • Sample260629-e3netses9n
  • SHA256 1c61e3ffa97534cb3ca378ea93d982a5fa94a576e1ed5ac5bca903c15c7f2b56
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-06-27_a1a3b10a2df7bd01b8967251871a93e2_akira_cobalt-strike_glassworm_icedid_luca-stealer_megazord_njrat_quasar-rat_rusty-stealer_satacom_vidar
    .exe 25.6MB
  • inject_helper.pyc
    .ps1 21KB

2026-06-27_a1a3b10a2df7bd01b8967251871a93e2_akira_cobalt-strike_glassworm_icedid_luca-stealer_megazord_njrat_quasar-rat_rusty-stealer_satacom_vidar

  • IMPHASH 8a8c273166ce834b8fee071a9d74b7ba
  • SHA256 1c61e3ffa97534cb3ca378ea93d982a5fa94a576e1ed5ac5bca903c15c7f2b56
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
12994056
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
qoderswitch.pdb