General
- Target 2026-07-29_235a42a1080ff0ecc773da87a5ff2d77_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.0MB
- Sample260729-ndn5hasfkb
- SHA256 383632c6a4904cc3c16ff949b73e620bfc222716b4ef867e91c9a3a22e4ff986
- MD5 235a42a1080ff0ecc773da87a5ff2d77
- SHA1 bc72bfc4072e9385f747a655bbc8f1cdf84a6c75
- SHA512 2b3fbcf20daff8a804c7eb369e18438324cfb8a4db3d249bba64120c544b380140a559f88c80c09c1e4ff7e105a171a7b37463b1dbf8d341bc897edf13f3e94c
- SSDEEP 49152:biX15IJv/pKKCECpExtwDzS9MAvM6+kuXunb7Q97/tKJ+AaLLeNF7pPhCtIbHgq/:PJ0Py9Mt/XuaK+EhC4NqOe0bWG9
- TLSH T19F366B53A36511B8D46FC8B4CF29542296253C8A43F4A6FF26D876F51A32ED43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_235a42a1080ff0ecc773da87a5ff2d77_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_235a42a1080ff0ecc773da87a5ff2d77_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.0MB
- SHA256 383632c6a4904cc3c16ff949b73e620bfc222716b4ef867e91c9a3a22e4ff986
- MD5 235a42a1080ff0ecc773da87a5ff2d77
- SHA1 bc72bfc4072e9385f747a655bbc8f1cdf84a6c75
- SHA512 2b3fbcf20daff8a804c7eb369e18438324cfb8a4db3d249bba64120c544b380140a559f88c80c09c1e4ff7e105a171a7b37463b1dbf8d341bc897edf13f3e94c
- SSDEEP 49152:biX15IJv/pKKCECpExtwDzS9MAvM6+kuXunb7Q97/tKJ+AaLLeNF7pPhCtIbHgq/:PJ0Py9Mt/XuaK+EhC4NqOe0bWG9
- TLSH T19F366B53A36511B8D46FC8B4CF29542296253C8A43F4A6FF26D876F51A32ED43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1