General
- Target 2026-07-08_8418f1d223fd1f9f7f3583857459acd9_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.5MB
- Sample260708-sbce5shz3j
- SHA256 b681b43ab01dfebd7fe15d2199dfe7d68acfa8557498d456a87014b738924365
- MD5 8418f1d223fd1f9f7f3583857459acd9
- SHA1 e4cc04d6867f50ed6fa1367ded1b788dbd90618e
- SHA512 627d3035b26692b362b562738f8fef8ea4dff1208d1697f37f6c617cc9f3bbf4baedace175ea7edefd0c578fdfdfc8da5c6772c77e93ffecd8f74af7dfc4aab5
- SSDEEP 49152:Z0i+LVn9yiqOO4rWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:SXWOOJOTNSQBjgitA
- TLSH T17FF57A13F19580E9D19DC174CF068235EB62B88E0BF6A5FF3A9096152E67ED07B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_8418f1d223fd1f9f7f3583857459acd9_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_8418f1d223fd1f9f7f3583857459acd9_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_8418f1d223fd1f9f7f3583857459acd9_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.5MB
- SHA256 b681b43ab01dfebd7fe15d2199dfe7d68acfa8557498d456a87014b738924365
- MD5 8418f1d223fd1f9f7f3583857459acd9
- SHA1 e4cc04d6867f50ed6fa1367ded1b788dbd90618e
- SHA512 627d3035b26692b362b562738f8fef8ea4dff1208d1697f37f6c617cc9f3bbf4baedace175ea7edefd0c578fdfdfc8da5c6772c77e93ffecd8f74af7dfc4aab5
- SSDEEP 49152:Z0i+LVn9yiqOO4rWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:SXWOOJOTNSQBjgitA
- TLSH T17FF57A13F19580E9D19DC174CF068235EB62B88E0BF6A5FF3A9096152E67ED07B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1