General
- Target 2026-07-12_4634f6a9c8793fe66e4e475e200ad05a_akira_cobalt-strike_elex_icedid_njrat_stealc_swisyn_vidar
- Size 1.6MB
- Sample260712-vt25maf18v
- SHA256 8401ad93ea7468081d39a2e7e29093d6d649052f528418bfad058f6a9852158c
- MD5 4634f6a9c8793fe66e4e475e200ad05a
- SHA1 a4d99b8f7b885d293527ff0f0bedc1776b0c73b3
- SHA512 1b6f6e3a1729ab4e528edf2d9860f038161520d6456146c68e270db70b2428094d7769ae883af174534115473f82d0afbcd43f8c98482654843255341b552e3a
- SSDEEP 24576:PFOaSarQw8OtYT/5QoUX4u51K5kkwIEscn9ngDFD165l/mPVKEh6ABEQsh:tVtS/5NUIu51uk0iOqCUK6+Rsh
- TLSH T13C75AE0B67A802ADE0B7C1788D668902F3767C5A0B719EDF13D046663F636E15E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_4634f6a9c8793fe66e4e475e200ad05a_akira_cobalt-strike_elex_icedid_njrat_stealc_swisyn_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_4634f6a9c8793fe66e4e475e200ad05a_akira_cobalt-strike_elex_icedid_njrat_stealc_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_4634f6a9c8793fe66e4e475e200ad05a_akira_cobalt-strike_elex_icedid_njrat_stealc_swisyn_vidar
- Size 1.6MB
- SHA256 8401ad93ea7468081d39a2e7e29093d6d649052f528418bfad058f6a9852158c
- MD5 4634f6a9c8793fe66e4e475e200ad05a
- SHA1 a4d99b8f7b885d293527ff0f0bedc1776b0c73b3
- SHA512 1b6f6e3a1729ab4e528edf2d9860f038161520d6456146c68e270db70b2428094d7769ae883af174534115473f82d0afbcd43f8c98482654843255341b552e3a
- SSDEEP 24576:PFOaSarQw8OtYT/5QoUX4u51K5kkwIEscn9ngDFD165l/mPVKEh6ABEQsh:tVtS/5NUIu51uk0iOqCUK6+Rsh
- TLSH T13C75AE0B67A802ADE0B7C1788D668902F3767C5A0B719EDF13D046663F636E15E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory