General
- Target 2026-06-30_a1e0d8385bc0c9f677c15575cba7564f_akira_cobalt-strike_icedid_rusty-stealer
- Size 779KB
- Sample260630-yvb7daez8l
- SHA256 5237600a0ba002a8fd82a6a985e9efb8b223e3849bd9543da56b03f3269f5b5d
- MD5 a1e0d8385bc0c9f677c15575cba7564f
- SHA1 420a7f533fc31453ad19dc853e3c481ff450601a
- SHA512 8ac0ef770a9877de5e745148378f39c9c25dd1ab3b0b58d6f53aebca97cd8d6bccf22c51f25572b73f4a1a01533a11f9289b9f26b1217313ab432e8efdb311eb
- SSDEEP 12288:mA/3vR9aNNPigY2WRRsqf+9zsizK6IYk/Wj4BiITzxnZZpcMW0t:XvR9siVLzy9pU/Wj4fXZpcM3
- TLSH T10505E126F95D09FCD026C03691512A63DF3178CA0721AEFF55D52A283E5BEE64F3A318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_a1e0d8385bc0c9f677c15575cba7564f_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_a1e0d8385bc0c9f677c15575cba7564f_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_a1e0d8385bc0c9f677c15575cba7564f_akira_cobalt-strike_icedid_rusty-stealer
- Size 779KB
- SHA256 5237600a0ba002a8fd82a6a985e9efb8b223e3849bd9543da56b03f3269f5b5d
- MD5 a1e0d8385bc0c9f677c15575cba7564f
- SHA1 420a7f533fc31453ad19dc853e3c481ff450601a
- SHA512 8ac0ef770a9877de5e745148378f39c9c25dd1ab3b0b58d6f53aebca97cd8d6bccf22c51f25572b73f4a1a01533a11f9289b9f26b1217313ab432e8efdb311eb
- SSDEEP 12288:mA/3vR9aNNPigY2WRRsqf+9zsizK6IYk/Wj4BiITzxnZZpcMW0t:XvR9siVLzy9pU/Wj4fXZpcM3
- TLSH T10505E126F95D09FCD026C03691512A63DF3178CA0721AEFF55D52A283E5BEE64F3A318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Suspicious use of NtSetInformationThreadHideFromDebugger