General
- Target 2026-07-24_9eadcb165fea6f708881d6f625947eec_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- Sample260724-xpjtlabj7x
- SHA256 24f699918f641165f6e6a3b85c72f4d4263555896e6d06502f5c21838ff3719a
- MD5 9eadcb165fea6f708881d6f625947eec
- SHA1 5a699424413128a6579c2048381d96dcc85c604e
- SHA512 b46f059eb0c4dc25b72b195e7be00b074054b2c59c4ac254e6ad94bf2d0d949b2bf88eb089a41dac9b6df8203d70d2d37e0f19614cbeb0f29ad8eb5081518ce9
- SSDEEP 49152:5+/PivcpfQvdaKYXf3Cleyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755TF:k/PvOBjcXvvOOc5MtA
- TLSH T1FD165A1E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_9eadcb165fea6f708881d6f625947eec_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_9eadcb165fea6f708881d6f625947eec_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- SHA256 24f699918f641165f6e6a3b85c72f4d4263555896e6d06502f5c21838ff3719a
- MD5 9eadcb165fea6f708881d6f625947eec
- SHA1 5a699424413128a6579c2048381d96dcc85c604e
- SHA512 b46f059eb0c4dc25b72b195e7be00b074054b2c59c4ac254e6ad94bf2d0d949b2bf88eb089a41dac9b6df8203d70d2d37e0f19614cbeb0f29ad8eb5081518ce9
- SSDEEP 49152:5+/PivcpfQvdaKYXf3Cleyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755TF:k/PvOBjcXvvOOc5MtA
- TLSH T1FD165A1E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory