2026-07-23_de753d4a6f68b265ce0a5a223b0fa4c4_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

General

Target
2026-07-23_de753d4a6f68b265ce0a5a223b0fa4c4_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
Size 5.6MB
Sample260723-n7dwmaxgpb
SHA256 ab7162730c30455d2a55033ab3d3804d2b82dee636e68a872cb94bdde0c94ffa
MD5 de753d4a6f68b265ce0a5a223b0fa4c4
SHA1 7021c2fe848d5b4e27bc0161477fa21281baa4a2
SHA512 4083a9577234611cc43ba04b2aee2d970ef36cf6b7de6888ed17b87cd2e40bd926f0d5b23a0ea0c531bf486466d3a5e64aa7d4bb38981dcf784e9fc0488b1f9e
SSDEEP 98304:bRWJIIEJhfWTlosv3B8C3OIcmQTG62BUq2L6S7gG5YReoqwWajM:tW+RJhdIR5OIbUG6U2L6VGWReoXW7
TLSH
T18C562312B62695FCE957C07087168D639A22B4DA0722BDFF02D0463A3F5AFE06F39754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_de753d4a6f68b265ce0a5a223b0fa4c4_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

File Explorer

2026-07-23_de753d4a6f68b265ce0a5a223b0fa4c4_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

.exe 5.6MB

2026-07-23_de753d4a6f68b265ce0a5a223b0fa4c4_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

IMPHASH 05381ead8cc25c367dcee6aad2f95ffc
SHA256 ab7162730c30455d2a55033ab3d3804d2b82dee636e68a872cb94bdde0c94ffa
MD5 de753d4a6f68b265ce0a5a223b0fa4c4
SHA1 7021c2fe848d5b4e27bc0161477fa21281baa4a2
SHA512 4083a9577234611cc43ba04b2aee2d970ef36cf6b7de6888ed17b87cd2e40bd926f0d5b23a0ea0c531bf486466d3a5e64aa7d4bb38981dcf784e9fc0488b1f9e
SSDEEP 98304:bRWJIIEJhfWTlosv3B8C3OIcmQTG62BUq2L6S7gG5YReoqwWajM:tW+RJhdIR5OIbUG6U2L6VGWReoXW7
TLSH
T18C562312B62695FCE957C07087168D639A22B4DA0722BDFF02D0463A3F5AFE06F39754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

278736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

python_self_extractor.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetFilePointerEx FlushFileBuffers SetLastError GetFinalPathNameByHandleW GetLastError GetProcessHeap HeapFree CloseHandle GetCommandLineW WaitForSingleObject GetExitCodeProcess HeapReAlloc AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte GetEnvironmentVariableW HeapAlloc CreateDirectoryW GetFullPathNameW GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose CreateFileW SetFileInformationByHandle GetModuleHandleW FormatMessageW GetModuleHandleA GetModuleFileNameW WriteFileEx SleepEx ReadFileEx ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileAttributesW DuplicateHandle CreateThread FlsFree HeapSize LCMapStringW CompareStringW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx RtlPcToFileHeader RaiseException EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW WriteFile TerminateProcess GetModuleHandleExW GetCommandLineA FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue

ntdll

RtlNtStatusToDosError NtOpenFile NtCreateNamedPipeFile NtWriteFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_de753d4a6f68b265ce0a5a223b0fa4c4_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

generic