2026-07-22_1f238a0a35f7354d1fb3c12b470361cc_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_1f238a0a35f7354d1fb3c12b470361cc_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar
Size 1.5MB
Sample260723-cd9knafb73
SHA256 cf4a63e858f98003621a9d84682db0e756f0b49b8c9b30ccd85b431b79d6d8e8
MD5 1f238a0a35f7354d1fb3c12b470361cc
SHA1 e42b0c5b647abcae8e49ff6335d0afe49ef90ea4
SHA512 2a18fe6d551bb9f0420153206452ae1695296e712d576f5568f2c28fb55fd3dfb42e2b934a5da49e3968e459f2cfce8e99721b960d1148aea30fa02a6fbc61b3
SSDEEP 49152:aZPgKDpIH+pZQESc86xUR6thDebcFvVa4eZw6QAhukeMJz66:z8ZQEDmbAvVa3w6QA0dMJz6
TLSH
T1AA759D45AE9BC5EAD17BA13FC5461942E5BEF602031393CB4B914A753F232E34D3A392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_1f238a0a35f7354d1fb3c12b470361cc_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-07-22_1f238a0a35f7354d1fb3c12b470361cc_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

.exe 1.5MB

2026-07-22_1f238a0a35f7354d1fb3c12b470361cc_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

IMPHASH f9bbd9a50a1378278fd166c16250f282
SHA256 cf4a63e858f98003621a9d84682db0e756f0b49b8c9b30ccd85b431b79d6d8e8
MD5 1f238a0a35f7354d1fb3c12b470361cc
SHA1 e42b0c5b647abcae8e49ff6335d0afe49ef90ea4
SHA512 2a18fe6d551bb9f0420153206452ae1695296e712d576f5568f2c28fb55fd3dfb42e2b934a5da49e3968e459f2cfce8e99721b960d1148aea30fa02a6fbc61b3
SSDEEP 49152:aZPgKDpIH+pZQESc86xUR6thDebcFvVa4eZw6QAhukeMJz66:z8ZQEDmbAvVa3w6QA0dMJz6
TLSH
T1AA759D45AE9BC5EAD17BA13FC5461942E5BEF602031393CB4B914A753F232E34D3A392
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

224208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dvs\p4\build\sw\gcomp\dev\src\NvContainer\_out\x86_64\release\container\NvContainer.pdb

shlwapi

PathIsRelativeW

kernel32

VerSetConditionMask CreateFileW GetFileAttributesW GetFullPathNameW OutputDebugStringW SetLastError CreateProcessA CreateProcessW GetSystemDirectoryW FreeLibrary GetModuleFileNameA GetModuleFileNameW GetProcAddress LoadLibraryExW lstrcmpA VerifyVersionInfoW FileTimeToSystemTime ExpandEnvironmentStringsW DeleteFileW FindClose FindFirstFileW FindNextFileW OutputDebugStringA Sleep GetCurrentThreadId ProcessIdToSessionId GetSystemTime GetSystemTimeAsFileTime CreateTimerQueueTimer DeleteTimerQueueTimer GetModuleHandleExW MoveFileW MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW RemoveVectoredContinueHandler CreateDirectoryW FindCloseChangeNotification FindFirstChangeNotificationW FindNextChangeNotification GetCurrentDirectoryW GetErrorMode SetErrorMode GetCommandLineW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA RemoveDirectoryW DeviceIoControl HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetStringTypeW GetFileSizeEx ReadConsoleW ReadFile SetStdHandle GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetConsoleCtrlHandler GetCurrentThread EnumSystemLocalesW AddVectoredContinueHandler RemoveVectoredExceptionHandler AddVectoredExceptionHandler SetUnhandledExceptionFilter RtlCaptureStackBackTrace RtlUnwind GetModuleHandleW WaitForMultipleObjects OpenEventW LocalFree LocalAlloc OpenProcess CreateThread GetCurrentProcessId CreateEventW WaitForSingleObject SetEvent GetLastError CloseHandle GetCurrentProcess GetProcessTimes SetDefaultDllDirectories HeapReAlloc Process32NextW FormatMessageA SetCurrentDirectoryW FindFirstFileExW GetDiskFreeSpaceExW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW SetEndOfFile SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetFileTime GetTempPathW AreFileApisANSI CreateDirectoryExW CopyFileW MoveFileExW CreateHardLinkW GetFileInformationByHandleEx CreateSymbolicLinkW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection ResetEvent WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead InterlockedPushEntrySList InterlockedFlushSList RtlUnwindEx RtlPcToFileHeader EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetFileType GetStdHandle WriteConsoleW GetCPInfo WriteFile HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID

user32

PeekMessageW GetMessageW ShutdownBlockReasonDestroy ShutdownBlockReasonCreate SetWindowLongPtrW GetWindowLongPtrW LoadStringW UnregisterClassW RegisterClassW DefWindowProcW PostMessageW DispatchMessageW TranslateMessage DestroyWindow PostThreadMessageW CreateWindowExW

shell32

CommandLineToArgvW

advapi32

RegDeleteValueW RegSetKeyValueW RegOpenKeyExW GetUserNameW BuildExplicitAccessWithNameW SetSecurityInfo GetSecurityInfo SetEntriesInAclW StartServiceCtrlDispatcherW SetServiceStatus RegisterServiceCtrlHandlerExW QueryServiceConfigW OpenServiceW OpenSCManagerW CloseServiceHandle ChangeServiceConfigW RegGetValueW RegSetValueExW RegCreateKeyExW RegCloseKey LookupAccountSidW CreateWellKnownSid OpenProcessToken

Name

.text

Size

640KB

Virtual Size

640KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

144KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_1f238a0a35f7354d1fb3c12b470361cc_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

shlwapi

kernel32

user32

shell32

advapi32

generic