2026-07-10_9de705870b8357323c28e59784e4f828_akira_cobalt-strike_glassworm_icedid_njrat_vidar

General

Target
2026-07-10_9de705870b8357323c28e59784e4f828_akira_cobalt-strike_glassworm_icedid_njrat_vidar
Size 26.8MB
Sample260710-map2yshw2l
SHA256 b2408b7904e72e844d73097d33bca6373c704de9f8550654fc2f92c3e86aaa48
MD5 9de705870b8357323c28e59784e4f828
SHA1 f0c789be89980a41ce6fd734f3cca32e5ae67b03
SHA512 8afa599c169888d63e586e65ee4a33fea553fa201b363c8c21927e8d45bbda89439b579c16bfc0e24114d0485449a6080dbc2a7bafce70ccd35bc9e153e457cf
SSDEEP 786432:4roRDuXVdRhogyZgYeB6kvJkUAQ683JpYJZJ3k6s:4roE3JpYJZJU7
TLSH
T163576C5620A7124CE03EE87C899A7E07D1EA370B07935EDB7580C2B95B9BDED48F9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_9de705870b8357323c28e59784e4f828_akira_cobalt-strike_glassworm_icedid_njrat_vidar

File Explorer

2026-07-10_9de705870b8357323c28e59784e4f828_akira_cobalt-strike_glassworm_icedid_njrat_vidar

.exe 26.8MB

2026-07-10_9de705870b8357323c28e59784e4f828_akira_cobalt-strike_glassworm_icedid_njrat_vidar

IMPHASH 02cd30ab06e68b4dfcda8d657649f353
SHA256 b2408b7904e72e844d73097d33bca6373c704de9f8550654fc2f92c3e86aaa48
MD5 9de705870b8357323c28e59784e4f828
SHA1 f0c789be89980a41ce6fd734f3cca32e5ae67b03
SHA512 8afa599c169888d63e586e65ee4a33fea553fa201b363c8c21927e8d45bbda89439b579c16bfc0e24114d0485449a6080dbc2a7bafce70ccd35bc9e153e457cf
SSDEEP 786432:4roRDuXVdRhogyZgYeB6kvJkUAQ683JpYJZJ3k6s:4roE3JpYJZJU7
TLSH
T163576C5620A7124CE03EE87C899A7E07D1EA370B07935EDB7580C2B95B9BDED48F9350
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28151808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r610\r610_45\drivers\OpenGL\tools\pcc\_out\wddm2_amd64_release\nvidia-pcc.pdb

kernel32

FreeLibrary GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryExW LocalAlloc LocalFree VerifyVersionInfoW FindClose FindFirstFileA FindNextFileA OutputDebugStringA IsDebuggerPresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TryEnterCriticalSection FormatMessageA Sleep SwitchToThread GetExitCodeThread GetNativeSystemInfo WideCharToMultiByte InitOnceBeginInitialize InitOnceComplete ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount QueryPerformanceFrequency EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList ExitProcess GetModuleHandleExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread HeapFree HeapAlloc GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CreateProcessW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc SetStdHandle FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap OutputDebugStringW GetTimeZoneInformation HeapSize WriteConsoleW SetEndOfFile RemoveDirectoryW CreateProcessA SetLastError GetLastError GetSystemDirectoryW InitializeCriticalSection WaitForSingleObject GetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW GetDiskFreeSpaceExA GetDriveTypeW GetFileInformationByHandle GetFinalPathNameByHandleW GetVolumePathNameW LockFileEx SetFileAttributesW SetFileInformationByHandle SetFileTime UnlockFileEx DuplicateHandle GetSystemInfo GetSystemTime VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile MoveFileExW CreateHardLinkW SystemTimeToFileTime ExpandEnvironmentStringsW SetErrorMode LoadLibraryW GetProcessTimes GetConsoleScreenBufferInfo SetConsoleTextAttribute SearchPathW GetExitCodeProcess CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes GetModuleHandleA GetVersionExW VirtualAlloc VirtualProtect VirtualFree SetProcessAffinityMask ReleaseSemaphore InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx WaitForMultipleObjectsEx RtlCaptureStackBackTrace RtlUnwind HeapValidate HeapWalk DeleteFileW GetFileAttributesExW CloseHandle GetFullPathNameW GetFileAttributesW CreateFileW SetConsoleCtrlHandler VerSetConditionMask TerminateThread CreateSemaphoreA CreateWaitableTimerA GetEnvironmentVariableA SetEnvironmentVariableA CreateDirectoryA CreateFileA SetFilePointer PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime

advapi32

CryptAcquireContextW RegOpenKeyExA CryptGenRandom CryptReleaseContext CryptAcquireContextA RegQueryValueExW RegOpenKeyExW RegCloseKey RegGetValueW

shell32

SHFileOperationW

ws2_32

WSAStartup WSACleanup gethostname

Name

.text

Size

16.9MB

Virtual Size

16.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

766KB

Virtual Size

824KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

882KB

Virtual Size

881KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_9de705870b8357323c28e59784e4f828_akira_cobalt-strike_glassworm_icedid_njrat_vidar

kernel32

advapi32

shell32

ws2_32

generic