2026-07-06_9f21f97eb935ab8a2f5b8195d32f3c2b_akira_cobalt-strike_glassworm_icedid_njrat_vidar

General

Target
2026-07-06_9f21f97eb935ab8a2f5b8195d32f3c2b_akira_cobalt-strike_glassworm_icedid_njrat_vidar
Size 27.3MB
Sample260706-l9hw9adv21
SHA256 083c3331a4332b8e5133e9cc7d8c4c840b328b9eae8130405cd78d019785629a
MD5 9f21f97eb935ab8a2f5b8195d32f3c2b
SHA1 e224f0b317d0713e30e5193f4e351a7f3ee09156
SHA512 b9c8e9423245b903af86be931900acde05f36c485e09ee7c012bc1aad02ad6c8503632025f1e9fe3d3daa532a91aadbbc776bb3047906d329105c6d883908ba5
SSDEEP 786432:ACZjEBlHyvyijiQStYgeWBeYBOlYBY3JpYJZJM:ACZjf3JpYJZJM
TLSH
T1C5577D5720A7125CE03EE87C8A9A7E06E1EA371707935EDB7580C2B55B9BCEC48F9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_9f21f97eb935ab8a2f5b8195d32f3c2b_akira_cobalt-strike_glassworm_icedid_njrat_vidar

File Explorer

2026-07-06_9f21f97eb935ab8a2f5b8195d32f3c2b_akira_cobalt-strike_glassworm_icedid_njrat_vidar

.exe 27.3MB

2026-07-06_9f21f97eb935ab8a2f5b8195d32f3c2b_akira_cobalt-strike_glassworm_icedid_njrat_vidar

IMPHASH 7805fa3235ac1a5468c89b04f7f672ec
SHA256 083c3331a4332b8e5133e9cc7d8c4c840b328b9eae8130405cd78d019785629a
MD5 9f21f97eb935ab8a2f5b8195d32f3c2b
SHA1 e224f0b317d0713e30e5193f4e351a7f3ee09156
SHA512 b9c8e9423245b903af86be931900acde05f36c485e09ee7c012bc1aad02ad6c8503632025f1e9fe3d3daa532a91aadbbc776bb3047906d329105c6d883908ba5
SSDEEP 786432:ACZjEBlHyvyijiQStYgeWBeYBOlYBY3JpYJZJM:ACZjf3JpYJZJM
TLSH
T1C5577D5720A7125CE03EE87C8A9A7E06E1EA371707935EDB7580C2B55B9BCEC48F9350
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4494580

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r595\r595_00\drivers\OpenGL\tools\pcc\_out\wddm2_amd64_release\nvidia-pcc.pdb

kernel32

FreeLibrary GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryExW LocalAlloc LocalFree VerifyVersionInfoW FindClose FindFirstFileA FindNextFileA OutputDebugStringA IsDebuggerPresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TryEnterCriticalSection FormatMessageA Sleep SwitchToThread GetExitCodeThread GetNativeSystemInfo WideCharToMultiByte InitOnceBeginInitialize InitOnceComplete TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount QueryPerformanceFrequency EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList ExitProcess GetModuleHandleExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread HeapFree HeapAlloc GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP CreateProcessW ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc SetStdHandle FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap OutputDebugStringW GetTimeZoneInformation HeapSize WriteConsoleW SetEndOfFile RemoveDirectoryW CreateProcessA SetLastError GetLastError GetSystemDirectoryW InitializeCriticalSection GetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW GetDiskFreeSpaceExA GetDriveTypeW GetFileInformationByHandle GetFinalPathNameByHandleW GetVolumePathNameW LockFileEx SetFileAttributesW SetFileInformationByHandle SetFileTime UnlockFileEx DuplicateHandle GetSystemInfo GetSystemTime VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile MoveFileExW CreateHardLinkW SystemTimeToFileTime WaitForSingleObject ExpandEnvironmentStringsW SetErrorMode LoadLibraryW GetProcessTimes GetConsoleScreenBufferInfo SetConsoleTextAttribute SearchPathW GetExitCodeProcess CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes GetModuleHandleA GetVersionExW VirtualAlloc VirtualProtect VirtualFree SetProcessAffinityMask ReleaseSemaphore InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx WaitForMultipleObjectsEx RtlCaptureStackBackTrace RtlUnwind HeapValidate HeapWalk DeleteFileW GetFileAttributesExW CloseHandle GetFullPathNameW GetFileAttributesW CreateFileW GetConsoleMode VerSetConditionMask TerminateThread CreateSemaphoreA CreateWaitableTimerA GetEnvironmentVariableA SetEnvironmentVariableA CreateDirectoryA CreateFileA SetFilePointer PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime

advapi32

CryptAcquireContextW RegOpenKeyExA CryptGenRandom CryptReleaseContext CryptAcquireContextA RegQueryValueExW RegOpenKeyExW RegCloseKey RegGetValueW

shell32

SHFileOperationW

ws2_32

WSAStartup WSACleanup gethostname

Name

.text

Size

16.9MB

Virtual Size

16.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

764KB

Virtual Size

829KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

877KB

Virtual Size

876KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

616KB

Virtual Size

620KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_9f21f97eb935ab8a2f5b8195d32f3c2b_akira_cobalt-strike_glassworm_icedid_njrat_vidar

kernel32

advapi32

shell32

ws2_32

generic