2026-07-07_ed83e7e32364d82e3418409dea0feb03_akira_cobalt-strike_icedid_luca-stealer_njrat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-07_ed83e7e32364d82e3418409dea0feb03_akira_cobalt-strike_icedid_luca-stealer_njrat_rusty-stealer
Size 257KB
Sample260707-2cndgae18v
SHA256 05929968f748397b007c08291a7c616d2edc21b955cb66a1671de7a9f104136d
MD5 ed83e7e32364d82e3418409dea0feb03
SHA1 cf9a3eb1322b7b0efb91a431db3d97f85fa02ea3
SHA512 15e78caf49fcf24c2d2385d1e399e7fe65777d8cdc5622bf4f89dccdbee260d84845bd551e8cb158e1a8a4dc3cdc8523d8299d84a4067f9e332215287791b43d
SSDEEP 3072:ne5pn+ZyplI7x4SFx5S3C6tANhhdD6xWVRKPAI6lrza9z:c0ypl8uSFSSLD68Vokre9z
TLSH
T131447C17B7A128F9E567C03CC6614656E77378A60B21DAFF03A442352F276E15E3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_ed83e7e32364d82e3418409dea0feb03_akira_cobalt-strike_icedid_luca-stealer_njrat_rusty-stealer

File Explorer

2026-07-07_ed83e7e32364d82e3418409dea0feb03_akira_cobalt-strike_icedid_luca-stealer_njrat_rusty-stealer

.exe 257KB

2026-07-07_ed83e7e32364d82e3418409dea0feb03_akira_cobalt-strike_icedid_luca-stealer_njrat_rusty-stealer

IMPHASH 3ee9255a8295ec215ed86d9c5eb6ee3a
SHA256 05929968f748397b007c08291a7c616d2edc21b955cb66a1671de7a9f104136d
MD5 ed83e7e32364d82e3418409dea0feb03
SHA1 cf9a3eb1322b7b0efb91a431db3d97f85fa02ea3
SHA512 15e78caf49fcf24c2d2385d1e399e7fe65777d8cdc5622bf4f89dccdbee260d84845bd551e8cb158e1a8a4dc3cdc8523d8299d84a4067f9e332215287791b43d
SSDEEP 3072:ne5pn+ZyplI7x4SFx5S3C6tANhhdD6xWVRKPAI6lrza9z:c0ypl8uSFSSLD68Vokre9z
TLSH
T131447C17B7A128F9E567C03CC6614656E77378A60B21DAFF03A442352F276E15E3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bypass.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

GetModuleHandleW IsProcessorFeaturePresent SetUnhandledExceptionFilter VirtualAlloc LoadLibraryA GetProcAddress RtlAddFunctionTable GetCurrentProcess VirtualProtect CreateActCtxW ActivateActCtx ReleaseActCtx CreateThread WaitForSingleObject CloseHandle DeactivateActCtx RtlDeleteFunctionTable VirtualFree AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleA GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead QueryPerformanceCounter

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp _CxxThrowException memset __CxxFrameHandler3 __C_specific_handler __current_exception __current_exception_context memmove memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _get_initial_narrow_environment __p___argv _register_onexit_function _crt_atexit terminate _initialize_narrow_environment _configure_narrow_argv exit __p___argc _initialize_onexit_table _exit _seh_filter_exe _set_app_type

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_ed83e7e32364d82e3418409dea0feb03_akira_cobalt-strike_icedid_luca-stealer_njrat_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic