General
- Target 2026-07-14_9aec9d33cda5c1491db1107cbff6278f_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
- Size 1.2MB
- Sample260714-3feq6sft7m
- SHA256 6e173e100146d5863aee525cba5e6402369c5dd706ad5e4387de094671718a13
- MD5 9aec9d33cda5c1491db1107cbff6278f
- SHA1 e454e7bfd3508d204b0f2e738f8d22cc535d0cb2
- SHA512 8ea6a386ff4ce9ea90f371b8fa05a5138970494a3d77b2c82bb3e401da70141929481d25af45686a4815d2eb29ebdae61de719bec8c84ada1d5ad33876bcad86
- SSDEEP 24576:BPivxvV3BwQNhzZ323oatEfPz78h1W3SEt7vRuy15V/emWf:BexvVNNm4RnzkoVvxtJW
- TLSH T1FE451236BA9054F5D127C077C6050A69FAF378851B22AAEF139112282F7B6ED4F3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_9aec9d33cda5c1491db1107cbff6278f_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_9aec9d33cda5c1491db1107cbff6278f_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
- Size 1.2MB
- SHA256 6e173e100146d5863aee525cba5e6402369c5dd706ad5e4387de094671718a13
- MD5 9aec9d33cda5c1491db1107cbff6278f
- SHA1 e454e7bfd3508d204b0f2e738f8d22cc535d0cb2
- SHA512 8ea6a386ff4ce9ea90f371b8fa05a5138970494a3d77b2c82bb3e401da70141929481d25af45686a4815d2eb29ebdae61de719bec8c84ada1d5ad33876bcad86
- SSDEEP 24576:BPivxvV3BwQNhzZ323oatEfPz78h1W3SEt7vRuy15V/emWf:BexvVNNm4RnzkoVvxtJW
- TLSH T1FE451236BA9054F5D127C077C6050A69FAF378851B22AAEF139112282F7B6ED4F3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1