2026-07-09_058f59b82061111c842a0594ae9c120e_akira_cobalt-strike_icedid_njrat_satacom_vidar

Resubmissions

10/07/2026, 15:00

260710-sdenaadx8110

10/07/2026, 12:20

260710-phvnhsbv5l8

09/07/2026, 13:10

260709-qevd1scs2x10

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_058f59b82061111c842a0594ae9c120e_akira_cobalt-strike_icedid_njrat_satacom_vidar
Size 3.7MB
Sample260709-qevd1scs2x
SHA256 0a5607c8298448f1781a20ef5d7416c0d8aaa27030fa383b8ae55f68925e5095
MD5 058f59b82061111c842a0594ae9c120e
SHA1 20a880bbc292b669212850d6d15a83bbaa114448
SHA512 ed046d1275781bfb16cbae9688e8eefdb67e60a079ab59c05557924ad8c2f2bf08590344e3c55ec7c38e8bdfdee241adec0d4eb96c3e595ede0020b833c2bd6f
SSDEEP 49152:GmVGUnKURKczI44OCmRUIuRxB/cBywTKKxGR42:/zK7JTKxsb
TLSH
T17206FA12E7650DE2D99380B0CD766B22CBA6BC7C0BF107777B3246DEA86B2D03526745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_058f59b82061111c842a0594ae9c120e_akira_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-09_058f59b82061111c842a0594ae9c120e_akira_cobalt-strike_icedid_njrat_satacom_vidar

.exe 3.7MB

2026-07-09_058f59b82061111c842a0594ae9c120e_akira_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH 3604e4a96af790516403534ef8adedf4
SHA256 0a5607c8298448f1781a20ef5d7416c0d8aaa27030fa383b8ae55f68925e5095
MD5 058f59b82061111c842a0594ae9c120e
SHA1 20a880bbc292b669212850d6d15a83bbaa114448
SHA512 ed046d1275781bfb16cbae9688e8eefdb67e60a079ab59c05557924ad8c2f2bf08590344e3c55ec7c38e8bdfdee241adec0d4eb96c3e595ede0020b833c2bd6f
SSDEEP 49152:GmVGUnKURKczI44OCmRUIuRxB/cBywTKKxGR42:/zK7JTKxsb
TLSH
T17206FA12E7650DE2D99380B0CD766B22CBA6BC7C0BF107777B3246DEA86B2D03526745
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3923968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\BuildAgent\work\e4cd6e8028b37277\Tools\SphericalEquirect\bin\Release\SphericalEquirect64.pdb

kernel32

DecodePointer RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection RtlUnwind CreateSemaphoreA WaitForSingleObject ReleaseSemaphore InitializeCriticalSection DebugBreak SetEndOfFile WriteConsoleW CreateFileW FormatMessageA WideCharToMultiByte QueryPerformanceCounter CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW MultiByteToWideChar EncodePointer LocalFree LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead OutputDebugStringW RtlUnwindEx RtlPcToFileHeader SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize

ole32

CoCreateInstance CoUninitialize CoInitializeEx

windowscodecs

WICConvertBitmapSource

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_058f59b82061111c842a0594ae9c120e_akira_cobalt-strike_icedid_njrat_satacom_vidar

kernel32

ole32

windowscodecs

generic