General
- Target 2026-07-18_43d38fb2d5bd16f9d972dbc13adffddf_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- Sample260718-bg8bbsbt7q
- SHA256 06105efaf7e8ecb0dcaffb033e8fe4af184990a5351ce323ac6fa410a19b1374
- MD5 43d38fb2d5bd16f9d972dbc13adffddf
- SHA1 ef88d31abbad718b9669fdabd52e8c01de3ce44c
- SHA512 02b15d41768db9c33b66e4c36ca41b6f6ba387920a0d42df9b884785a68f024753decb2f2f6a755c3a2cb0e93b4449db27a4f7211b5c69ba969b48535c8e852d
- SSDEEP 49152:V+/PivcpfQvdaKYXf3C0eyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755a2:Y/PvOIjcXvvOOc5AD527BWG
- TLSH T134165A1E735885E9D5A6D1BD8A42C506E271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_43d38fb2d5bd16f9d972dbc13adffddf_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_43d38fb2d5bd16f9d972dbc13adffddf_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- SHA256 06105efaf7e8ecb0dcaffb033e8fe4af184990a5351ce323ac6fa410a19b1374
- MD5 43d38fb2d5bd16f9d972dbc13adffddf
- SHA1 ef88d31abbad718b9669fdabd52e8c01de3ce44c
- SHA512 02b15d41768db9c33b66e4c36ca41b6f6ba387920a0d42df9b884785a68f024753decb2f2f6a755c3a2cb0e93b4449db27a4f7211b5c69ba969b48535c8e852d
- SSDEEP 49152:V+/PivcpfQvdaKYXf3C0eyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755a2:Y/PvOIjcXvvOOc5AD527BWG
- TLSH T134165A1E735885E9D5A6D1BD8A42C506E271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory