General
- Target 2026-07-22_872e3c6a5a9d4ddebc46963d7758a6fe_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 19.3MB
- Sample260722-3mjnpssxc1
- SHA256 c78179ed9823b6da187ebeaaa28b1bf822707878b5e17f309b1f5a831f67e814
- MD5 872e3c6a5a9d4ddebc46963d7758a6fe
- SHA1 3eb0e6dc6184604462c29787f776fc03a67684af
- SHA512 dfb25f35709f84a9f47223584a7ad2552fc600aaeb96d701f8fea63875d10893ac258111b93d312d321ad3bfadccaf30bfe0c359b79fce820bc25b122cb83545
- SSDEEP 393216:s2pyub590Ypel1Xh4NzpH1EUMw3K34KXwy3GT2Gz9NX6SzUcfQ4F:6ub590YZKXwy3GT2GpESzh4
- TLSH T1D6176B43F39651E8E01EC4B9871A5222FAB17C89073566EF07946B212F77FE46B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_872e3c6a5a9d4ddebc46963d7758a6fe_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_872e3c6a5a9d4ddebc46963d7758a6fe_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 19.3MB
- SHA256 c78179ed9823b6da187ebeaaa28b1bf822707878b5e17f309b1f5a831f67e814
- MD5 872e3c6a5a9d4ddebc46963d7758a6fe
- SHA1 3eb0e6dc6184604462c29787f776fc03a67684af
- SHA512 dfb25f35709f84a9f47223584a7ad2552fc600aaeb96d701f8fea63875d10893ac258111b93d312d321ad3bfadccaf30bfe0c359b79fce820bc25b122cb83545
- SSDEEP 393216:s2pyub590Ypel1Xh4NzpH1EUMw3K34KXwy3GT2Gz9NX6SzUcfQ4F:6ub590YZKXwy3GT2GpESzh4
- TLSH T1D6176B43F39651E8E01EC4B9871A5222FAB17C89073566EF07946B212F77FE46B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1