General
- Target 2026-07-23_98f5bc8122807b41ac32f3d41ed96784_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 20.2MB
- Sample260723-mzhdea1ses
- SHA256 60538b5ba8bb0b1ccdb0df24755ad97aa1f6a6f6e548a2f5a184e651c69f6bcf
- MD5 98f5bc8122807b41ac32f3d41ed96784
- SHA1 c9aa16d425a0dcd4513025e157e0ad3fac56aa82
- SHA512 85eecbfe56da86892ffa9438b70b9f0b4bc2ef96c1d5f3040f198fd43278c80db51ae49cadc547e15400ae4c5e5ac278b716dca69efdb93875f25e31edfeb8f0
- SSDEEP 196608:OVnHI6rrYI5Y8ID3XaxlcW547nLg3mPKp9DgdDLL:OVh3YHqcnLgUo9DgdDL
- TLSH T196278D13F2A641D9E05DC5B9471A5232EA71BC494B34B2DF0A502B961F7BFE4AB3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_98f5bc8122807b41ac32f3d41ed96784_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_98f5bc8122807b41ac32f3d41ed96784_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 20.2MB
- SHA256 60538b5ba8bb0b1ccdb0df24755ad97aa1f6a6f6e548a2f5a184e651c69f6bcf
- MD5 98f5bc8122807b41ac32f3d41ed96784
- SHA1 c9aa16d425a0dcd4513025e157e0ad3fac56aa82
- SHA512 85eecbfe56da86892ffa9438b70b9f0b4bc2ef96c1d5f3040f198fd43278c80db51ae49cadc547e15400ae4c5e5ac278b716dca69efdb93875f25e31edfeb8f0
- SSDEEP 196608:OVnHI6rrYI5Y8ID3XaxlcW547nLg3mPKp9DgdDLL:OVh3YHqcnLgUo9DgdDL
- TLSH T196278D13F2A641D9E05DC5B9471A5232EA71BC494B34B2DF0A502B961F7BFE4AB3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1