General
- Target 2026-07-14_5ec719ca65829b10ea8b91157c176166_akira_cobalt-strike_icedid_njrat_vidar
- Size 3.4MB
- Sample260714-xmw15set2y
- SHA256 f7233baa61b81d9050a2fdc88989541f1758e1c2db8067d45d026280f46051ca
- MD5 5ec719ca65829b10ea8b91157c176166
- SHA1 29220477e4cfbc44497eaffd9db2ffef173bd5cf
- SHA512 4ddfae54a2550756762006eb84fc115f4f275abc4dfa0736a90d06b29a36f0fcfc690ffe30752dee80564ae6a7a3d07342efab2df9f3744cb58bc63f28389df9
- SSDEEP 49152:banYnyMqOkg9+xCDbGQOlc494+3RNGMbWyvxQoeJqdr1b9W7JVTV:uYnTluCGQ2cj+rp9W7T
- TLSH T159F59E5B72A901E8D177D17CCA475B06F6B274064731ABCF12A487AA1F27BE05E7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_5ec719ca65829b10ea8b91157c176166_akira_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_5ec719ca65829b10ea8b91157c176166_akira_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_5ec719ca65829b10ea8b91157c176166_akira_cobalt-strike_icedid_njrat_vidar
- Size 3.4MB
- SHA256 f7233baa61b81d9050a2fdc88989541f1758e1c2db8067d45d026280f46051ca
- MD5 5ec719ca65829b10ea8b91157c176166
- SHA1 29220477e4cfbc44497eaffd9db2ffef173bd5cf
- SHA512 4ddfae54a2550756762006eb84fc115f4f275abc4dfa0736a90d06b29a36f0fcfc690ffe30752dee80564ae6a7a3d07342efab2df9f3744cb58bc63f28389df9
- SSDEEP 49152:banYnyMqOkg9+xCDbGQOlc494+3RNGMbWyvxQoeJqdr1b9W7JVTV:uYnTluCGQ2cj+rp9W7T
- TLSH T159F59E5B72A901E8D177D17CCA475B06F6B274064731ABCF12A487AA1F27BE05E7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops file in System32 directory