General
- Target 2026-06-27_357dddb4a7b73ca19e1a3ab881a4b83d_akira_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.1MB
- Sample260629-kf9mfaaz5m
- SHA256 69703ab81da2131a3c36afefd7e5c32e7d80c9a91c27b8158f842374b74e8d75
- MD5 357dddb4a7b73ca19e1a3ab881a4b83d
- SHA1 c8f8ac6964ee7d983e9ae7cfd794e49238a1e41a
- SHA512 fb92746da613d7eb86996791e30688f7a8a931a14d658ed4cb6282dfed90e2c7f31b1cb9db4c8cfe627013ca44c100dec702413ae3105f2965400294f406e750
- SSDEEP 24576:H9e2s4/EguRr1/pyyZTDEJE3gNV5T8cY5Zu9d:o2/0/pyyJDEJE3gZwhmd
- TLSH T136455C2A665801ECD46AD1B88D66C922E7B17C1A03709ACF07D0BE573F77AE15E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-27_357dddb4a7b73ca19e1a3ab881a4b83d_akira_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_357dddb4a7b73ca19e1a3ab881a4b83d_akira_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260618-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_357dddb4a7b73ca19e1a3ab881a4b83d_akira_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.1MB
- SHA256 69703ab81da2131a3c36afefd7e5c32e7d80c9a91c27b8158f842374b74e8d75
- MD5 357dddb4a7b73ca19e1a3ab881a4b83d
- SHA1 c8f8ac6964ee7d983e9ae7cfd794e49238a1e41a
- SHA512 fb92746da613d7eb86996791e30688f7a8a931a14d658ed4cb6282dfed90e2c7f31b1cb9db4c8cfe627013ca44c100dec702413ae3105f2965400294f406e750
- SSDEEP 24576:H9e2s4/EguRr1/pyyZTDEJE3gNV5T8cY5Zu9d:o2/0/pyyJDEJE3gZwhmd
- TLSH T136455C2A665801ECD46AD1B88D66C922E7B17C1A03709ACF07D0BE573F77AE15E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.