General
- Target 2026-07-22_76e5e21a21ebb499229ef8a191988a76_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 19.6MB
- Sample260722-3rbtnasyct
- SHA256 716d97f97dc12f619c2726ff841963c17adebe99fa91120b5d8dd7a6d5fe1b7d
- MD5 76e5e21a21ebb499229ef8a191988a76
- SHA1 58bb1a6ebb2c1acc3609a57d125aeec1fd87beab
- SHA512 84dae61a1687df0ecd2af39c1b0e073b6701664afef9c6e803b61d5574d4ad58f6c4e6de8dafd0f34e1840f294a364af8c6ead04f24281fc36cf50c3ee483edc
- SSDEEP 98304:xW46/z3S88hm8M7GXf3wS6ESVXI6faDRN88aP/SYvQXe/2jxmL2kcddwPy3Tw6r/:e/Jrb7I6M4mBVw30zvcPGjUTfcdIrpU
- TLSH T136277C13F39A40D9E04DD5B9C75A9222EAB57C890735B2DF07506B122F7BED4AB38B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_76e5e21a21ebb499229ef8a191988a76_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_76e5e21a21ebb499229ef8a191988a76_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 19.6MB
- SHA256 716d97f97dc12f619c2726ff841963c17adebe99fa91120b5d8dd7a6d5fe1b7d
- MD5 76e5e21a21ebb499229ef8a191988a76
- SHA1 58bb1a6ebb2c1acc3609a57d125aeec1fd87beab
- SHA512 84dae61a1687df0ecd2af39c1b0e073b6701664afef9c6e803b61d5574d4ad58f6c4e6de8dafd0f34e1840f294a364af8c6ead04f24281fc36cf50c3ee483edc
- SSDEEP 98304:xW46/z3S88hm8M7GXf3wS6ESVXI6faDRN88aP/SYvQXe/2jxmL2kcddwPy3Tw6r/:e/Jrb7I6M4mBVw30zvcPGjUTfcdIrpU
- TLSH T136277C13F39A40D9E04DD5B9C75A9222EAB57C890735B2DF07506B122F7BED4AB38B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1