General
- Target 2026-06-30_d82834053eb52b123c9f26f20b7ca29d_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.5MB
- Sample260701-c1ry5aew6z
- SHA256 420127126ab511e19f9d785ab188d2f8bf5b1fda4241a9e7c35ee7973cb1062d
- MD5 d82834053eb52b123c9f26f20b7ca29d
- SHA1 bdea245aa31b49bee27424915bdda65e0ce7e2f0
- SHA512 2d94165639620f21e269d15b15df18a8af30f79b23c7231747b8f732632500ee9181f7dc99e29e9e7e92f145b56e9f2d1c488d6d542fcda05a2f621b98c01611
- SSDEEP 49152:Lzsbc//ZiftT2ZWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:cgnZi12wOTNSQBjgitA
- TLSH T1B3069C23E19501D9D29AC134CF468231EB7278AE07F5A5EF3294561A2E37AD0BB3D734
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_d82834053eb52b123c9f26f20b7ca29d_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_d82834053eb52b123c9f26f20b7ca29d_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_d82834053eb52b123c9f26f20b7ca29d_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.5MB
- SHA256 420127126ab511e19f9d785ab188d2f8bf5b1fda4241a9e7c35ee7973cb1062d
- MD5 d82834053eb52b123c9f26f20b7ca29d
- SHA1 bdea245aa31b49bee27424915bdda65e0ce7e2f0
- SHA512 2d94165639620f21e269d15b15df18a8af30f79b23c7231747b8f732632500ee9181f7dc99e29e9e7e92f145b56e9f2d1c488d6d542fcda05a2f621b98c01611
- SSDEEP 49152:Lzsbc//ZiftT2ZWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:cgnZi12wOTNSQBjgitA
- TLSH T1B3069C23E19501D9D29AC134CF468231EB7278AE07F5A5EF3294561A2E37AD0BB3D734
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1