2026-07-31_e44027ea4fb97cfc7cbbac3d95a99173_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_e44027ea4fb97cfc7cbbac3d95a99173_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar
Size 12.5MB
Sample260731-tva7vsdc59
SHA256 ab3475bc27c69c59a10bb61b4bb245eb3bcf41a737769b4f6666a24f96b81742
MD5 e44027ea4fb97cfc7cbbac3d95a99173
SHA1 012564b56c314b42aff22f4002b41dd7e9e98648
SHA512 2b1ba4b5c15b9a8bbca894e9f39754ac31d23dc5df83febc138d566e220023e8edd8405f94d796beea13c4f166a3059d02577c01b81314533e1f2ef9e891262f
SSDEEP 196608:chujRXyXFjF/klkLEE2+CQFe05eYJy9kJ:cgOBkFE/CQFe2gI
TLSH
T146D6AEEFE7D641BAE356E034C15AA226CAB27026133852CB528552272F76FC46D7C733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_e44027ea4fb97cfc7cbbac3d95a99173_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-07-31_e44027ea4fb97cfc7cbbac3d95a99173_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

.exe 12.5MB

2026-07-31_e44027ea4fb97cfc7cbbac3d95a99173_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

IMPHASH 22ef99c1be63564bacd1586d072d2321
SHA256 ab3475bc27c69c59a10bb61b4bb245eb3bcf41a737769b4f6666a24f96b81742
MD5 e44027ea4fb97cfc7cbbac3d95a99173
SHA1 012564b56c314b42aff22f4002b41dd7e9e98648
SHA512 2b1ba4b5c15b9a8bbca894e9f39754ac31d23dc5df83febc138d566e220023e8edd8405f94d796beea13c4f166a3059d02577c01b81314533e1f2ef9e891262f
SSDEEP 196608:chujRXyXFjF/klkLEE2+CQFe05eYJy9kJ:cgOBkFE/CQFe2gI
TLSH
T146D6AEEFE7D641BAE356E034C15AA226CAB27026133852CB528552272F76FC46D7C733
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

404488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AntiCheatInstaller.pdb

d3d9

Direct3DCreate9

advapi32

ControlService GetTokenInformation InitializeSecurityDescriptor SetSecurityDescriptorDacl SetEntriesInAclA BuildTrusteeWithSidA ConvertStringSidToSidA GetSecurityDescriptorDacl RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW ChangeServiceConfig2W CloseServiceHandle OpenProcessToken CreateServiceW DeleteService OpenSCManagerA OpenServiceW QueryServiceObjectSecurity QueryServiceStatusEx SetServiceObjectSecurity

shell32

SHFileOperationW SHGetKnownFolderPath ShellExecuteExW CommandLineToArgvW ShellExecuteW

shlwapi

PathFileExistsW

ole32

CoTaskMemFree

user32

CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW PeekMessageA DispatchMessageA TranslateMessage EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetProcessDPIAware DestroyWindow ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetClientRect GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent ShowWindow SetWindowPos UpdateWindow SwitchToThisWindow SetForegroundWindow GetDesktopWindow LoadCursorA

kernel32

GetCommandLineA GetCPInfo GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc GetTimeZoneInformation SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP GetFileType LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread DeleteFileW LoadLibraryExW GetStringTypeW TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA MultiByteToWideChar GlobalAlloc GlobalUnlock GlobalLock GlobalFree WideCharToMultiByte CreateDirectoryW OutputDebugStringW GetLastError LocalFree LoadResource LockResource SizeofResource FindResourceA CreateFileW FlushFileBuffers GetFileSizeEx ReadFile WriteFile GetTempPathW CloseHandle HeapAlloc HeapFree GetProcessHeap GetCommandLineW WaitForSingleObject GetCurrentProcess RtlUnwind EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead HeapSize SetEndOfFile WriteConsoleW TlsFree GetExitCodeProcess Sleep GetExitCodeThread InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx TryEnterCriticalSection

imm32

ImmSetCandidateWindow ImmReleaseContext ImmSetCompositionWindow ImmGetContext

Name

.text

Size

554KB

Virtual Size

553KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11.9MB

Virtual Size

11.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_e44027ea4fb97cfc7cbbac3d95a99173_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar

d3d9

advapi32

shell32

shlwapi

ole32

user32

kernel32

imm32

generic