General
- Target 2026-07-08_6bd87e65af5c6fa971913ee2566f2c27_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.5MB
- Sample260708-wbl65aez5x
- SHA256 b4d873d26bace1d2e7a4d230afbadaa09671f16ec7337deaaee22b5880f2636d
- MD5 6bd87e65af5c6fa971913ee2566f2c27
- SHA1 a67f8d8ace29b3e0e0487b58614915444ec4ee5f
- SHA512 f43c74a54182107acc163ae3b2aeb998382335f9a351f6d398220bfe70326f3d5e2856df6e1fd196c54d698cc5f4adae4c77532321a8abfe5f2f7413f9b75a6b
- SSDEEP 49152:tGUKigrE31XkrWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:tRltl0KOTNSQBjgitA
- TLSH T100068B03A1D800D9D199C174CF06C131EB72788E5BF6A5FF36A096192EB7AD07B3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_6bd87e65af5c6fa971913ee2566f2c27_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_6bd87e65af5c6fa971913ee2566f2c27_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_6bd87e65af5c6fa971913ee2566f2c27_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.5MB
- SHA256 b4d873d26bace1d2e7a4d230afbadaa09671f16ec7337deaaee22b5880f2636d
- MD5 6bd87e65af5c6fa971913ee2566f2c27
- SHA1 a67f8d8ace29b3e0e0487b58614915444ec4ee5f
- SHA512 f43c74a54182107acc163ae3b2aeb998382335f9a351f6d398220bfe70326f3d5e2856df6e1fd196c54d698cc5f4adae4c77532321a8abfe5f2f7413f9b75a6b
- SSDEEP 49152:tGUKigrE31XkrWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:tRltl0KOTNSQBjgitA
- TLSH T100068B03A1D800D9D199C174CF06C131EB72788E5BF6A5FF36A096192EB7AD07B3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1