2026-07-17_56b9f50de6cca03e51016f2876c64357_akira_cobalt-strike

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-17_56b9f50de6cca03e51016f2876c64357_akira_cobalt-strike
Size 244KB
Sample260718-edcl2aft7n
SHA256 edc8fccd91edeb4e164142bd8e1fbaa406574305ed9f6a365d2d21a59049a658
MD5 56b9f50de6cca03e51016f2876c64357
SHA1 2550cf36ab80581bfe2109a5b1aac08e6ce03bee
SHA512 7f4e0b4c19480c4469b5ef81c2924d70d6428412c2656ad71a55184f135498a5432c2da95ea2616bddc94c43b3566279cec9a3e6db401ee45d4bf6b1daa00e89
SSDEEP 3072:RSZYwgT9zbu7oWKDJaHmBvQIXimpWGazwhJKImA9OLQD+TPbWNtKHtR0GfhCmK6d:7wg47w/ZiSKImA4MDyT
TLSH
T1F2346C5BB6A264BCE11AC03C934AD1B3BF26B4860721BDBF12E486703E5BD516F1CB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_56b9f50de6cca03e51016f2876c64357_akira_cobalt-strike

File Explorer

2026-07-17_56b9f50de6cca03e51016f2876c64357_akira_cobalt-strike

.exe 244KB

2026-07-17_56b9f50de6cca03e51016f2876c64357_akira_cobalt-strike

IMPHASH 774a1f9398517561ef8789a51507b9fa
SHA256 edc8fccd91edeb4e164142bd8e1fbaa406574305ed9f6a365d2d21a59049a658
MD5 56b9f50de6cca03e51016f2876c64357
SHA1 2550cf36ab80581bfe2109a5b1aac08e6ce03bee
SHA512 7f4e0b4c19480c4469b5ef81c2924d70d6428412c2656ad71a55184f135498a5432c2da95ea2616bddc94c43b3566279cec9a3e6db401ee45d4bf6b1daa00e89
SSDEEP 3072:RSZYwgT9zbu7oWKDJaHmBvQIXimpWGazwhJKImA9OLQD+TPbWNtKHtR0GfhCmK6d:7wg47w/ZiSKImA4MDyT
TLSH
T1F2346C5BB6A264BCE11AC03C934AD1B3BF26B4860721BDBF12E486703E5BD516F1CB15
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateToolhelp32Snapshot DuplicateHandle GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleHandleA GetProcAddress GetProcessHeap GetStdHandle HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WriteConsoleW DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _exit _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

ntdll

NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

199KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

600B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-17_56b9f50de6cca03e51016f2876c64357_akira_cobalt-strike

kernel32

msvcrt

ntdll

api-ms-win-core-synch-l1-2-0

generic